[ MDVSA-2009:341 ] dstat

[dude67]

_______________________________________________________________________

Package : dstat
Date : December 26, 2009
Affected: Corporate 4.0
_______________________________________________________________________

Problem Description:

Multiple vulnerabilities has been found and corrected in dstat:

Multiple untrusted search path vulnerabilities in dstat before 0.7.0
allow local users to gain privileges via a Trojan horse Python module
in (1) the current working directory or (2) a certain subdirectory
of the current working directory (CVE-2009-3894, CVE-2009-4081).

This update provides a solution to these vulnerabilities.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-3894
http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-4081
_______________________________________________________________________