Every CVESearch/Get API key

CVE-2014-2094

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4...

4.6 MediumFix available

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Exploit likelihood

0.42%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.6

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Record
CVE-2014-2094
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Record
CVE-2014-2094
Updated
2026-11-02
EUVDEUVD-2014-2134No score

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Record
EUVD-2014-2134
Updated
2026-11-03
GitHub AdvisoriesGHSA-c36g-qjwr-7984No score

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4...

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Record
GHSA-c36g-qjwr-7984
Updated
2026-11-02
OSVNo score

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Record
CVE-2014-2094
Updated
2026-11-02
OSVDEBIAN-CVE-2014-2094No score

Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.

Record
DEBIAN-CVE-2014-2094
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
catfish
Debian:12
before 1.0.1-1
1.0.1-1
catfish
Debian:13
before 1.0.1-1
1.0.1-1
catfish
Debian:14
before 1.0.1-1
1.0.1-1

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2094 is a medium vulnerability (CVSS 4.6) in Catfish Project Catfish, published February 26, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in catfish 1.0.1-1.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open