Description
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
autojump autojump
before 21.5.8affected
References
- https://security-tracker.debian.org/tracker/CVE-2013-2012 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2012 ↗
- http://www.openwall.com/lists/oss-security/2013/04/25/14 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83827 ↗
- https://github.com/wting/autojump/commit/ad09ee27d402be797b3456abff6edeb4291edfec ↗
- https://github.com/wting/autojump/commit/c763b2afadb188ab52849c21d43d2e8fe5b8800a ↗