CVE-2008-0302

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-17 · updated 2026-06-16
Weakness: CWE-94

Description

Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.

Affected products

Debian Apt-Listchanges: through 2.81

References

http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32
http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog
http://secunia.com/advisories/28513
http://secunia.com/advisories/28574
http://www.debian.org/security/2008/dsa-1465
http://www.securityfocus.com/bid/27331
http://www.ubuntu.com/usn/usn-572-1
http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32
http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog
http://secunia.com/advisories/28513
http://secunia.com/advisories/28574
http://www.debian.org/security/2008/dsa-1465

Get alerted when CVE-2008-0302 or the next vulnerability affects your stack