blob: 36d0bf4453bf5ac597981473b453a96cf1b0b702 [file] [log] [blame]
<?xml version="1.0" encoding="utf-8"?>
<glsa id="200505-14">
<title>Cheetah: Untrusted module search path</title>
Cheetah contains a vulnerability in the module importing code that can
allow a local user to gain escalated privileges.
<product type="ebuild">Cheetah</product>
<announced>May 19, 2005</announced>
<revised>May 17, 2006: 02</revised>
<package name="dev-python/cheetah" auto="yes" arch="*">
<unaffected range="ge">0.9.17_rc1</unaffected>
<vulnerable range="lt">0.9.17_rc1</vulnerable>
Cheetah is a Python powered template engine and code generator.
Brian Bird discovered that Cheetah searches for modules in the
world-writable /tmp directory.
<impact type="normal">
A malicious local user could place a module containing arbitrary code
in /tmp, which when imported would run with escalated privileges.
There are no known workarounds at this time.
All Cheetah users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose &quot;&gt;=dev-python/cheetah-0.9.17_rc1&quot;</code>
<uri link="">Secunia Advisory SA15386</uri>
<metadata tag="requester" timestamp="Tue, 17 May 2005 21:18:59 +0000">
<metadata tag="submitter" timestamp="Tue, 17 May 2005 21:38:15 +0000">
<metadata tag="bugReady" timestamp="Wed, 18 May 2005 11:47:34 +0000">