Vulnerability Details CVE-2008-4394
                Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.001
                        
                    
                    
                        
                            EPSS Ranking 18.0%
                        
                    
                 
                
                    CVSS Severity
                    
                    
                        
                            CVSS v2 Score 6.9
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2008-4394
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:-
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:2.0.50
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:2.0.51.22
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:2.1.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:2.1.3.10
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:2.1.3.11
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:gentoo:portage:2.1.4.4