CVE-2005-1632
Cheetah Path Search Order Hijacking
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
Exploit likelihood
What each source reports
NVD Score used
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
CVE-2005-1632- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
CVE-2005-1632- Updated
- 2026-11-02
EUVDEUVD-2022-5454 No score
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
EUVD-2022-5454- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vxf2-7rc3-pxmx No score
Cheetah Path Search Order Hijacking
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
GHSA-vxf2-7rc3-pxmx- Weakness
- CWE-427
- Updated
- 2026-11-02
OSV No score
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
CVE-2005-1632- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-1632 No score
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
DEBIAN-CVE-2005-1632- Updated
- 2026-11-02
OSVGHSA-vxf2-7rc3-pxmx No score
Cheetah Path Search Order Hijacking
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
GHSA-vxf2-7rc3-pxmx- Weakness
- CWE-427
- Updated
- 2026-11-02
OSVPYSEC-2026-622 No score
Cheetah Path Search Order Hijacking
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
- Record
PYSEC-2026-622- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1632 is a high vulnerability (CVSS 7.2) in Tavis Rudd Cheetah, published May 17, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in cheetah 0.9.16-1.
References
secunia.com/advisories/15386
sourceforge.net/mailarchive/forum.php?thread_id=7070332&forum_id=1542
osvdb.org/16622
nvd.nist.gov/vuln/detail/CVE-2005-1632
github.com/cheetahtemplate/cheetah
web.archive.org/web/20050430021153/http://sourceforge.net/mailarchive/forum.php?thread_id=7070332&forum_id=1542
security-tracker.debian.org/tracker/CVE-2005-1632
pypi.org/project/cheetah