CVE-2013-1874
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute...
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
- Record
CVE-2013-1874- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
- Record
CVE-2013-1874- Updated
- 2026-11-02
EUVDEUVD-2013-1876 No score
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
- Record
EUVD-2013-1876- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53x9-4x79-73hc No score
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute...
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
- Record
GHSA-53x9-4x79-73hc- Updated
- 2026-11-02
OSV No score
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
- Record
CVE-2013-1874- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1874 No score
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
- Record
DEBIAN-CVE-2013-1874- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1874 is a medium vulnerability (CVSS 4.4) in Call-cc Chicken, published September 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in chicken 4.8.0.3-1.
References
osvdb.org/91520
exchange.xforce.ibmcloud.com/vulnerabilities/85065
code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=blob%3Bf=NEWS%3Bh=c21c7cf9d1faf4f78736890ac7ca1d4b82d72ddd%3Bhb=c6750af99ada7fa4815ee834e4e705bcfac9c137
securityfocus.com/bid/58583
seclists.org/oss-sec/2013/q1/692
nvd.nist.gov/vuln/detail/CVE-2013-1874
github.com/advisories/GHSA-53x9-4x79-73hc
security-tracker.debian.org/tracker/CVE-2013-1874