CVE-2008-1951
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux...
CVE-2008-1951 is a medium vulnerability (CVSS 4.6) in Redhat Enterprise Linux, published June 25, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in sblim 0:1-13a.el4_6.1.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 0.38%EPSS, 32nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:1-13a.el4_6.1sblim +191 more
Description
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sblimRed Hat:enterprise_linux:4::as | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-cmpi-baseRed Hat:enterprise_linux:4::as | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-develRed Hat:enterprise_linux:4::as | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-testRed Hat:enterprise_linux:4::as | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-develRed Hat:enterprise_linux:4::as | before 0:1.0.4-13a.el4_6.1 | 0:1.0.4-13a.el4_6.1 |
sblim-cmpi-fsvolRed Hat:enterprise_linux:4::as | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-develRed Hat:enterprise_linux:4::as | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-testRed Hat:enterprise_linux:4::as | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-networkRed Hat:enterprise_linux:4::as | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-develRed Hat:enterprise_linux:4::as | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
Show 182 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sblim-cmpi-network-testRed Hat:enterprise_linux:4::as | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-nfsv3Red Hat:enterprise_linux:4::as | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv3-testRed Hat:enterprise_linux:4::as | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv4Red Hat:enterprise_linux:4::as | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-nfsv4-testRed Hat:enterprise_linux:4::as | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-paramsRed Hat:enterprise_linux:4::as | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-params-testRed Hat:enterprise_linux:4::as | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-sysfsRed Hat:enterprise_linux:4::as | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-sysfs-testRed Hat:enterprise_linux:4::as | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-syslogRed Hat:enterprise_linux:4::as | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-cmpi-syslog-testRed Hat:enterprise_linux:4::as | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-debuginfoRed Hat:enterprise_linux:4::as | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-gatherRed Hat:enterprise_linux:4::as | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-develRed Hat:enterprise_linux:4::as | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-providerRed Hat:enterprise_linux:4::as | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-testRed Hat:enterprise_linux:4::as | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-testsuiteRed Hat:enterprise_linux:4::as | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-wbemcliRed Hat:enterprise_linux:4::as | before 0:1.5.1-13a.el4_6.1 | 0:1.5.1-13a.el4_6.1 |
sblimRed Hat:enterprise_linux:4::desktop | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-cmpi-baseRed Hat:enterprise_linux:4::desktop | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-develRed Hat:enterprise_linux:4::desktop | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-testRed Hat:enterprise_linux:4::desktop | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-develRed Hat:enterprise_linux:4::desktop | before 0:1.0.4-13a.el4_6.1 | 0:1.0.4-13a.el4_6.1 |
sblim-cmpi-fsvolRed Hat:enterprise_linux:4::desktop | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-develRed Hat:enterprise_linux:4::desktop | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-testRed Hat:enterprise_linux:4::desktop | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-networkRed Hat:enterprise_linux:4::desktop | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-develRed Hat:enterprise_linux:4::desktop | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-testRed Hat:enterprise_linux:4::desktop | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-nfsv3Red Hat:enterprise_linux:4::desktop | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv3-testRed Hat:enterprise_linux:4::desktop | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv4Red Hat:enterprise_linux:4::desktop | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-nfsv4-testRed Hat:enterprise_linux:4::desktop | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-paramsRed Hat:enterprise_linux:4::desktop | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-params-testRed Hat:enterprise_linux:4::desktop | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-sysfsRed Hat:enterprise_linux:4::desktop | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-sysfs-testRed Hat:enterprise_linux:4::desktop | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-syslogRed Hat:enterprise_linux:4::desktop | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-cmpi-syslog-testRed Hat:enterprise_linux:4::desktop | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-gatherRed Hat:enterprise_linux:4::desktop | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-develRed Hat:enterprise_linux:4::desktop | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-providerRed Hat:enterprise_linux:4::desktop | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-testRed Hat:enterprise_linux:4::desktop | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-testsuiteRed Hat:enterprise_linux:4::desktop | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-wbemcliRed Hat:enterprise_linux:4::desktop | before 0:1.5.1-13a.el4_6.1 | 0:1.5.1-13a.el4_6.1 |
sblimRed Hat:enterprise_linux:4::es | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-cmpi-baseRed Hat:enterprise_linux:4::es | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-develRed Hat:enterprise_linux:4::es | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-testRed Hat:enterprise_linux:4::es | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-develRed Hat:enterprise_linux:4::es | before 0:1.0.4-13a.el4_6.1 | 0:1.0.4-13a.el4_6.1 |
sblim-cmpi-fsvolRed Hat:enterprise_linux:4::es | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-develRed Hat:enterprise_linux:4::es | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-testRed Hat:enterprise_linux:4::es | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-networkRed Hat:enterprise_linux:4::es | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-develRed Hat:enterprise_linux:4::es | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-testRed Hat:enterprise_linux:4::es | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-nfsv3Red Hat:enterprise_linux:4::es | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv3-testRed Hat:enterprise_linux:4::es | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv4Red Hat:enterprise_linux:4::es | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-nfsv4-testRed Hat:enterprise_linux:4::es | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-paramsRed Hat:enterprise_linux:4::es | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-params-testRed Hat:enterprise_linux:4::es | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-sysfsRed Hat:enterprise_linux:4::es | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-sysfs-testRed Hat:enterprise_linux:4::es | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-syslogRed Hat:enterprise_linux:4::es | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-cmpi-syslog-testRed Hat:enterprise_linux:4::es | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-debuginfoRed Hat:enterprise_linux:4::es | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-gatherRed Hat:enterprise_linux:4::es | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-develRed Hat:enterprise_linux:4::es | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-providerRed Hat:enterprise_linux:4::es | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-testRed Hat:enterprise_linux:4::es | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-testsuiteRed Hat:enterprise_linux:4::es | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-wbemcliRed Hat:enterprise_linux:4::es | before 0:1.5.1-13a.el4_6.1 | 0:1.5.1-13a.el4_6.1 |
sblimRed Hat:enterprise_linux:4::ws | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-cmpi-baseRed Hat:enterprise_linux:4::ws | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-develRed Hat:enterprise_linux:4::ws | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-base-testRed Hat:enterprise_linux:4::ws | before 0:1.5.4-13a.el4_6.1 | 0:1.5.4-13a.el4_6.1 |
sblim-cmpi-develRed Hat:enterprise_linux:4::ws | before 0:1.0.4-13a.el4_6.1 | 0:1.0.4-13a.el4_6.1 |
sblim-cmpi-fsvolRed Hat:enterprise_linux:4::ws | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-develRed Hat:enterprise_linux:4::ws | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-fsvol-testRed Hat:enterprise_linux:4::ws | before 0:1.4.3-13a.el4_6.1 | 0:1.4.3-13a.el4_6.1 |
sblim-cmpi-networkRed Hat:enterprise_linux:4::ws | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-develRed Hat:enterprise_linux:4::ws | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-network-testRed Hat:enterprise_linux:4::ws | before 0:1.3.7-13a.el4_6.1 | 0:1.3.7-13a.el4_6.1 |
sblim-cmpi-nfsv3Red Hat:enterprise_linux:4::ws | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv3-testRed Hat:enterprise_linux:4::ws | before 0:1.0.13-13a.el4_6.1 | 0:1.0.13-13a.el4_6.1 |
sblim-cmpi-nfsv4Red Hat:enterprise_linux:4::ws | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-nfsv4-testRed Hat:enterprise_linux:4::ws | before 0:1.0.11-13a.el4_6.1 | 0:1.0.11-13a.el4_6.1 |
sblim-cmpi-paramsRed Hat:enterprise_linux:4::ws | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-params-testRed Hat:enterprise_linux:4::ws | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-cmpi-sysfsRed Hat:enterprise_linux:4::ws | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-sysfs-testRed Hat:enterprise_linux:4::ws | before 0:1.1.8-13a.el4_6.1 | 0:1.1.8-13a.el4_6.1 |
sblim-cmpi-syslogRed Hat:enterprise_linux:4::ws | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-cmpi-syslog-testRed Hat:enterprise_linux:4::ws | before 0:0.7.9-13a.el4_6.1 | 0:0.7.9-13a.el4_6.1 |
sblim-debuginfoRed Hat:enterprise_linux:4::ws | before 0:1-13a.el4_6.1 | 0:1-13a.el4_6.1 |
sblim-gatherRed Hat:enterprise_linux:4::ws | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-develRed Hat:enterprise_linux:4::ws | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-providerRed Hat:enterprise_linux:4::ws | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-gather-testRed Hat:enterprise_linux:4::ws | before 0:2.1.1-13a.el4_6.1 | 0:2.1.1-13a.el4_6.1 |
sblim-testsuiteRed Hat:enterprise_linux:4::ws | before 0:1.2.4-13a.el4_6.1 | 0:1.2.4-13a.el4_6.1 |
sblim-wbemcliRed Hat:enterprise_linux:4::ws | before 0:1.5.1-13a.el4_6.1 | 0:1.5.1-13a.el4_6.1 |
sblimRed Hat:enterprise_linux:5::client_workstation | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-base-develRed Hat:enterprise_linux:5::client_workstation | before 0:1.5.5-31.el5_2.1 | 0:1.5.5-31.el5_2.1 |
sblim-cmpi-base-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.5.5-31.el5_2.1 | 0:1.5.5-31.el5_2.1 |
sblim-cmpi-develRed Hat:enterprise_linux:5::client_workstation | before 0:1.0.4-31.el5_2.1 | 0:1.0.4-31.el5_2.1 |
sblim-cmpi-dnsRed Hat:enterprise_linux:5::client_workstation | before 0:0.5.2-31.el5_2.1 | 0:0.5.2-31.el5_2.1 |
sblim-cmpi-dns-develRed Hat:enterprise_linux:5::client_workstation | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-dns-testRed Hat:enterprise_linux:5::client_workstation | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-fsvol-develRed Hat:enterprise_linux:5::client_workstation | before 0:1.4.4-31.el5_2.1 | 0:1.4.4-31.el5_2.1 |
sblim-cmpi-fsvol-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.4.4-31.el5_2.1 | 0:1.4.4-31.el5_2.1 |
sblim-cmpi-network-develRed Hat:enterprise_linux:5::client_workstation | before 0:1.3.8-31.el5_2.1 | 0:1.3.8-31.el5_2.1 |
sblim-cmpi-network-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.3.8-31.el5_2.1 | 0:1.3.8-31.el5_2.1 |
sblim-cmpi-nfsv3-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.0.14-31.el5_2.1 | 0:1.0.14-31.el5_2.1 |
sblim-cmpi-nfsv4-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.0.12-31.el5_2.1 | 0:1.0.12-31.el5_2.1 |
sblim-cmpi-params-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.2.6-31.el5_2.1 | 0:1.2.6-31.el5_2.1 |
sblim-cmpi-samba-develRed Hat:enterprise_linux:5::client_workstation | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-samba-testRed Hat:enterprise_linux:5::client_workstation | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-sysfs-testRed Hat:enterprise_linux:5::client_workstation | before 0:1.1.9-31.el5_2.1 | 0:1.1.9-31.el5_2.1 |
sblim-cmpi-syslog-testRed Hat:enterprise_linux:5::client_workstation | before 0:0.7.11-31.el5_2.1 | 0:0.7.11-31.el5_2.1 |
sblim-debuginfoRed Hat:enterprise_linux:5::client_workstation | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-gather-develRed Hat:enterprise_linux:5::client_workstation | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-gather-testRed Hat:enterprise_linux:5::client_workstation | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-testsuiteRed Hat:enterprise_linux:5::client_workstation | before 0:1.2.4-31.el5_2.1 | 0:1.2.4-31.el5_2.1 |
sblim-tools-libra-develRed Hat:enterprise_linux:5::client_workstation | before 0:0.2.3-31.el5_2.1 | 0:0.2.3-31.el5_2.1 |
sblimRed Hat:enterprise_linux:5::client | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cim-clientRed Hat:enterprise_linux:5::client | before 0:1.3.3-31.el5_2.1 | 0:1.3.3-31.el5_2.1 |
sblim-cim-client-javadocRed Hat:enterprise_linux:5::client | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cim-client-manualRed Hat:enterprise_linux:5::client | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-baseRed Hat:enterprise_linux:5::client | before 0:1.5.5-31.el5_2.1 | 0:1.5.5-31.el5_2.1 |
sblim-cmpi-fsvolRed Hat:enterprise_linux:5::client | before 0:1.4.4-31.el5_2.1 | 0:1.4.4-31.el5_2.1 |
sblim-cmpi-networkRed Hat:enterprise_linux:5::client | before 0:1.3.8-31.el5_2.1 | 0:1.3.8-31.el5_2.1 |
sblim-cmpi-nfsv3Red Hat:enterprise_linux:5::client | before 0:1.0.14-31.el5_2.1 | 0:1.0.14-31.el5_2.1 |
sblim-cmpi-nfsv4Red Hat:enterprise_linux:5::client | before 0:1.0.12-31.el5_2.1 | 0:1.0.12-31.el5_2.1 |
sblim-cmpi-paramsRed Hat:enterprise_linux:5::client | before 0:1.2.6-31.el5_2.1 | 0:1.2.6-31.el5_2.1 |
sblim-cmpi-sambaRed Hat:enterprise_linux:5::client | before 0:0.5.2-31.el5_2.1 | 0:0.5.2-31.el5_2.1 |
sblim-cmpi-sysfsRed Hat:enterprise_linux:5::client | before 0:1.1.9-31.el5_2.1 | 0:1.1.9-31.el5_2.1 |
sblim-cmpi-syslogRed Hat:enterprise_linux:5::client | before 0:0.7.11-31.el5_2.1 | 0:0.7.11-31.el5_2.1 |
sblim-debuginfoRed Hat:enterprise_linux:5::client | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-gatherRed Hat:enterprise_linux:5::client | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-gather-providerRed Hat:enterprise_linux:5::client | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-tools-libraRed Hat:enterprise_linux:5::client | before 0:0.2.3-31.el5_2.1 | 0:0.2.3-31.el5_2.1 |
sblim-wbemcliRed Hat:enterprise_linux:5::client | before 0:1.5.1-31.el5_2.1 | 0:1.5.1-31.el5_2.1 |
sblimRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cim-clientRed Hat:enterprise_linux:5::server | before 0:1.3.3-31.el5_2.1 | 0:1.3.3-31.el5_2.1 |
sblim-cim-client-javadocRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cim-client-manualRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-baseRed Hat:enterprise_linux:5::server | before 0:1.5.5-31.el5_2.1 | 0:1.5.5-31.el5_2.1 |
sblim-cmpi-base-develRed Hat:enterprise_linux:5::server | before 0:1.5.5-31.el5_2.1 | 0:1.5.5-31.el5_2.1 |
sblim-cmpi-base-testRed Hat:enterprise_linux:5::server | before 0:1.5.5-31.el5_2.1 | 0:1.5.5-31.el5_2.1 |
sblim-cmpi-develRed Hat:enterprise_linux:5::server | before 0:1.0.4-31.el5_2.1 | 0:1.0.4-31.el5_2.1 |
sblim-cmpi-dnsRed Hat:enterprise_linux:5::server | before 0:0.5.2-31.el5_2.1 | 0:0.5.2-31.el5_2.1 |
sblim-cmpi-dns-develRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-dns-testRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-fsvolRed Hat:enterprise_linux:5::server | before 0:1.4.4-31.el5_2.1 | 0:1.4.4-31.el5_2.1 |
sblim-cmpi-fsvol-develRed Hat:enterprise_linux:5::server | before 0:1.4.4-31.el5_2.1 | 0:1.4.4-31.el5_2.1 |
sblim-cmpi-fsvol-testRed Hat:enterprise_linux:5::server | before 0:1.4.4-31.el5_2.1 | 0:1.4.4-31.el5_2.1 |
sblim-cmpi-networkRed Hat:enterprise_linux:5::server | before 0:1.3.8-31.el5_2.1 | 0:1.3.8-31.el5_2.1 |
sblim-cmpi-network-develRed Hat:enterprise_linux:5::server | before 0:1.3.8-31.el5_2.1 | 0:1.3.8-31.el5_2.1 |
sblim-cmpi-network-testRed Hat:enterprise_linux:5::server | before 0:1.3.8-31.el5_2.1 | 0:1.3.8-31.el5_2.1 |
sblim-cmpi-nfsv3Red Hat:enterprise_linux:5::server | before 0:1.0.14-31.el5_2.1 | 0:1.0.14-31.el5_2.1 |
sblim-cmpi-nfsv3-testRed Hat:enterprise_linux:5::server | before 0:1.0.14-31.el5_2.1 | 0:1.0.14-31.el5_2.1 |
sblim-cmpi-nfsv4Red Hat:enterprise_linux:5::server | before 0:1.0.12-31.el5_2.1 | 0:1.0.12-31.el5_2.1 |
sblim-cmpi-nfsv4-testRed Hat:enterprise_linux:5::server | before 0:1.0.12-31.el5_2.1 | 0:1.0.12-31.el5_2.1 |
sblim-cmpi-paramsRed Hat:enterprise_linux:5::server | before 0:1.2.6-31.el5_2.1 | 0:1.2.6-31.el5_2.1 |
sblim-cmpi-params-testRed Hat:enterprise_linux:5::server | before 0:1.2.6-31.el5_2.1 | 0:1.2.6-31.el5_2.1 |
sblim-cmpi-sambaRed Hat:enterprise_linux:5::server | before 0:0.5.2-31.el5_2.1 | 0:0.5.2-31.el5_2.1 |
sblim-cmpi-samba-develRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-samba-testRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-cmpi-sysfsRed Hat:enterprise_linux:5::server | before 0:1.1.9-31.el5_2.1 | 0:1.1.9-31.el5_2.1 |
sblim-cmpi-sysfs-testRed Hat:enterprise_linux:5::server | before 0:1.1.9-31.el5_2.1 | 0:1.1.9-31.el5_2.1 |
sblim-cmpi-syslogRed Hat:enterprise_linux:5::server | before 0:0.7.11-31.el5_2.1 | 0:0.7.11-31.el5_2.1 |
sblim-cmpi-syslog-testRed Hat:enterprise_linux:5::server | before 0:0.7.11-31.el5_2.1 | 0:0.7.11-31.el5_2.1 |
sblim-debuginfoRed Hat:enterprise_linux:5::server | before 0:1-31.el5_2.1 | 0:1-31.el5_2.1 |
sblim-gatherRed Hat:enterprise_linux:5::server | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-gather-develRed Hat:enterprise_linux:5::server | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-gather-providerRed Hat:enterprise_linux:5::server | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-gather-testRed Hat:enterprise_linux:5::server | before 0:2.1.2-31.el5_2.1 | 0:2.1.2-31.el5_2.1 |
sblim-testsuiteRed Hat:enterprise_linux:5::server | before 0:1.2.4-31.el5_2.1 | 0:1.2.4-31.el5_2.1 |
sblim-tools-libraRed Hat:enterprise_linux:5::server | before 0:0.2.3-31.el5_2.1 | 0:0.2.3-31.el5_2.1 |
sblim-tools-libra-develRed Hat:enterprise_linux:5::server | before 0:0.2.3-31.el5_2.1 | 0:0.2.3-31.el5_2.1 |
sblim-wbemcliRed Hat:enterprise_linux:5::server | before 0:1.5.1-31.el5_2.1 | 0:1.5.1-31.el5_2.1 |
What each source reports
NVD Score used 4.6
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
- Record
CVE-2008-1951- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
- Record
CVE-2008-1951- Updated
- 2026-11-02
EUVDEUVD-2008-1949No score
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
- Record
EUVD-2008-1949- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ppg2-58hq-f747No score
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux...
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
- Record
GHSA-ppg2-58hq-f747- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/30803
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9635
exchange.xforce.ibmcloud.com/vulnerabilities/43315
rhn.redhat.com/errata/RHSA-2008-0497.html
securitytracker.com/id?1020354
securityfocus.com/bid/29913
Show 8 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=447705
nvd.nist.gov/vuln/detail/CVE-2008-1951
access.redhat.com/errata/RHSA-2008:0497
access.redhat.com/security/cve/CVE-2008-1951
github.com/advisories/GHSA-ppg2-58hq-f747
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0497.json
cve.org/CVERecord?id=CVE-2008-1951