Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 257006 (CVE-2009-0315) - net-irc/xchat Untrusted search path vulnerability in the python module (CVE-2009-0315)
Summary: net-irc/xchat Untrusted search path vulnerability in the python module (CVE-2...
Status: RESOLVED OBSOLETE
Alias: CVE-2009-0315
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Security
URL: https://bugzilla.redhat.com/show_bug....
Whiteboard: B3 [ebuild+]
Keywords:
Depends on: CVE-2008-5983
Blocks:
  Show dependency tree
 
Reported: 2009-01-30 22:50 UTC by Stefan Behte (RETIRED)
Modified: 2013-09-03 04:33 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Behte (RETIRED) gentoo-dev Security 2009-01-30 22:50:08 UTC 
CVE-2009-0315 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0315):
  Untrusted search path vulnerability in the Python module in xchat
  allows local users to execute arbitrary code via a Trojan horse
  Python file in the current working directory, related to a
  vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Comment 1 Robert Buchholz (RETIRED) gentoo-dev 2009-01-30 23:41:00 UTC 
I am not sure whether this bug is being tracked upstream. Please see the blocker for details and a patch example.
Comment 2 Robert Buchholz (RETIRED) gentoo-dev 2009-07-10 13:19:17 UTC 
ping, net-irc
Comment 3 Chris Reffett (RETIRED) gentoo-dev Security 2013-09-03 04:33:52 UTC 
xchat went away some time ago.