CVE-2014-2093
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain...
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
- Record
CVE-2014-2093- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
- Record
CVE-2014-2093- Updated
- 2026-11-02
EUVDEUVD-2014-2133 No score
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
- Record
EUVD-2014-2133- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7883-mv76-5r47 No score
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain...
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
- Record
GHSA-7883-mv76-5r47- Updated
- 2026-11-02
OSV No score
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
- Record
CVE-2014-2093- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-2093 No score
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
- Record
DEBIAN-CVE-2014-2093- Updated
- 2026-11-02
OSVMGASA-2014-0341 No score
Updated catfish package fixes CVE-2014-2093
Updated catfish package fixes security vulnerability:
Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse catfish.py in the current working directory (CVE-2014-2093).
Additionally, the update fixes the application icon symlink and a crash when some icons are missing from the icon theme.
- Record
MGASA-2014-0341- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2093 is a medium vulnerability (CVSS 4.6) in Catfish Project Catfish, published February 26, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in catfish 1.0.1-1.