Dag.wieers dstat up to 0.6.9 Local Privilege Escalation

Summaryinfo

A vulnerability marked as problematic has been reported in Dag.wieers dstat. This affects an unknown part. Performing a manipulation results in Local Privilege Escalation. This vulnerability was named CVE-2009-4081. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Dag.wieers dstat. This affects an unknown code. The manipulation with an unknown input leads to a local privilege escalation vulnerability. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Untrusted search path vulnerability in dstat before r3199 allows local users to gain privileges via a Trojan horse Python module in the current working directory, a different vulnerability than CVE-2009-3894.

The weakness was presented 11/29/2009 (Website). It is possible to read the advisory at bugs.gentoo.org. This vulnerability is uniquely identified as CVE-2009-4081 since 11/27/2009. Attacking locally is a requirement. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 0.5.8 eliminates this vulnerability.

See VDB-50941 for similar entry. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Dag.wieers

Name

• dstat

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.5.2
• 0.5.3
• 0.5.4
• 0.5.5
• 0.5.6
• 0.5.7
• 0.5.8
• 0.5.9
• 0.5.10
• 0.6.0
• 0.6.1
• 0.6.2
• 0.6.3
• 0.6.4
• 0.6.5
• 0.6.6
• 0.6.7
• 0.6.8
• 0.6.9

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion