TI-2005-04521 Aliases CVE-2005-4791 GHSA-53f4-27hf-367h

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working…

LOW 12Published 2006-04-26 · Updated 2024-08-08

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Partial · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

Why it matters now

EPSS 0.00454 39th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:novell:suse_linux:10.0:::::::*	10.0	Vulnerable	Novell

cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Novell

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2005-4791
2026-10-03 Alias added: GHSA-53f4-27hf-367h

References

Patch 1

SUSE-SR:2005:022

Other 3

TI-2024-11208 Rsync: heap buffer overflow in rsync due to improper checksum length handling CVSS 3.1CRITICAL 9.8
TI-2024-11212 Rsync: --safe-links option bypass leads to path traversal CVSS 3.1HIGH 7.5
TI-2013-04258 The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2… CVSS 2.0HIGH 7.8
TI-2007-01243 The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to… CVSS 3.1HIGH 7.5
TI-2010-03717 The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does… CVSS 2.0HIGH 10.0
TI-2010-02972 Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE… CVSS 2.0HIGH 7.2

See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences