Every CVESearch/Get API key

CVE-2009-3894

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain...

4.4 MediumFix available

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Exploit likelihood

0.34%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.4

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Record
CVE-2009-3894
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Record
CVE-2009-3894
Updated
2026-11-02
EUVDEUVD-2009-3865No score

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Record
EUVD-2009-3865
Updated
2026-11-03
GitHub AdvisoriesGHSA-c59x-5529-vcp7No score

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain...

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Record
GHSA-c59x-5529-vcp7
Updated
2026-11-02
OSVNo score

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Record
CVE-2009-3894
Updated
2026-11-02
OSVDEBIAN-CVE-2009-3894No score

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Record
DEBIAN-CVE-2009-3894
Updated
2026-11-02
OSVopenSUSE-SU-2024:10001-1No score

dstat-0.7.3-1.3 on GA media

These are all security issues fixed in the dstat-0.7.3-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10001-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14878-1No score

dool-1.3.4-2.1 on GA media

These are all security issues fixed in the dool-1.3.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14878-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dstat
Debian:12
before 0.7.0-1
0.7.0-1
dstat
Red Hat:enterprise_linux:5::client
before 0:0.6.6-3.el5_4.1
0:0.6.6-3.el5_4.1
dstat
Red Hat:enterprise_linux:5::server
before 0:0.6.6-3.el5_4.1
0:0.6.6-3.el5_4.1
dstat
openSUSE:Tumbleweed
before 0.7.3-1.3
0.7.3-1.3
dool
openSUSE:Tumbleweed
before 1.3.4-2.1
1.3.4-2.1

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3894 is a medium vulnerability (CVSS 4.4) in Dag.wieers Dstat, published November 27, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in dstat 0.7.0-1.

References

Show 14 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open