CVE-2005-4790

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions.

Affected products

Novell Suse Linux: 10.0
Suse Linux: 9.3

References

http://bugs.gentoo.org/show_bug.cgi?id=188806
http://bugs.gentoo.org/show_bug.cgi?id=189249
http://bugs.gentoo.org/show_bug.cgi?id=199841
http://osvdb.org/39577
http://osvdb.org/39578
http://secunia.com/advisories/26480
http://secunia.com/advisories/27608
http://secunia.com/advisories/27621
http://secunia.com/advisories/27799
http://secunia.com/advisories/28339
http://secunia.com/advisories/28672
http://security.gentoo.org/glsa/glsa-200711-12.xml

Get alerted when CVE-2005-4790 or the next vulnerability affects your stack