Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2008-4394

Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.0%
CVSS Severity
CVSS v2 Score 6.9
Products affected by CVE-2008-4394
  • Gentoo » Portage » Version: N/A
    cpe:2.3:a:gentoo:portage:-
  • Gentoo » Portage » Version: 2.0.50
    cpe:2.3:a:gentoo:portage:2.0.50
  • Gentoo » Portage » Version: 2.0.51.22
    cpe:2.3:a:gentoo:portage:2.0.51.22
  • Gentoo » Portage » Version: 2.1.1
    cpe:2.3:a:gentoo:portage:2.1.1
  • Gentoo » Portage » Version: 2.1.3.10
    cpe:2.3:a:gentoo:portage:2.1.3.10
  • Gentoo » Portage » Version: 2.1.3.11
    cpe:2.3:a:gentoo:portage:2.1.3.11
  • Gentoo » Portage » Version: 2.1.4.4
    cpe:2.3:a:gentoo:portage:2.1.4.4


Contact Us

Shodan ® - All rights reserved