Vulnerability Details CVE-2007-6167
Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.0%
CVSS Severity
CVSS v2 Score 7.2
References
- http://osvdb.org/44158
- http://secunia.com/advisories/27756
- http://www.novell.com/linux/security/advisories/2007_24_sr.html
- http://www.securityfocus.com/bid/26634
- http://osvdb.org/44158
- http://secunia.com/advisories/27756
- http://www.novell.com/linux/security/advisories/2007_24_sr.html
- http://www.securityfocus.com/bid/26634
Products affected by CVE-2007-6167
-
cpe:2.3:o:suse:suse_linux:-
-
cpe:2.3:o:suse:suse_linux:1.0
-
cpe:2.3:o:suse:suse_linux:10
-
cpe:2.3:o:suse:suse_linux:10.0
-
cpe:2.3:o:suse:suse_linux:10.1
-
cpe:2.3:o:suse:suse_linux:2.0
-
cpe:2.3:o:suse:suse_linux:3.0
-
cpe:2.3:o:suse:suse_linux:4.0
-
cpe:2.3:o:suse:suse_linux:4.2
-
cpe:2.3:o:suse:suse_linux:4.3
-
cpe:2.3:o:suse:suse_linux:4.4
-
cpe:2.3:o:suse:suse_linux:4.4.1
-
cpe:2.3:o:suse:suse_linux:5.0
-
cpe:2.3:o:suse:suse_linux:5.1
-
cpe:2.3:o:suse:suse_linux:5.2
-
cpe:2.3:o:suse:suse_linux:5.3
-
cpe:2.3:o:suse:suse_linux:6.0
-
cpe:2.3:o:suse:suse_linux:6.1
-
cpe:2.3:o:suse:suse_linux:6.2
-
cpe:2.3:o:suse:suse_linux:6.3
-
cpe:2.3:o:suse:suse_linux:6.4
-
cpe:2.3:o:suse:suse_linux:7.0
-
cpe:2.3:o:suse:suse_linux:7.1
-
cpe:2.3:o:suse:suse_linux:7.2
-
cpe:2.3:o:suse:suse_linux:7.3
-
cpe:2.3:o:suse:suse_linux:8.0
-
cpe:2.3:o:suse:suse_linux:8.1
-
cpe:2.3:o:suse:suse_linux:8.2
-
cpe:2.3:o:suse:suse_linux:9.0
-
cpe:2.3:o:suse:suse_linux:9.1
-
cpe:2.3:o:suse:suse_linux:9.2
-
cpe:2.3:o:suse:suse_linux:9.3