CVE-2013-1874
published 2014-09-29CVE-2013-1874: Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current…
PriorityP417medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.42%
34.8th percentile
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| call-cc | chicken | <= 4.8.1 | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| call-cc | chicken | — | — |
| chicken | chicken | >= 0 < 4.8.0.3-1 | 4.8.0.3-1 |
| chicken | chicken | >= 0 < 4.8.0.3-1 | 4.8.0.3-1 |
| chicken | chicken | >= 0 < 4.8.0.3-1 | 4.8.0.3-1 |
| chicken | chicken | >= 0 < 4.8.0.3-1 | 4.8.0.3-1 |
| debian | chicken | < chicken 4.8.0.3-1 (bookworm) | chicken 4.8.0.3-1 (bookworm) |
CVSS provenance
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv4.4MEDIUM
vendor_debian4.4LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-53x9-4x79-73hc: Untrusted search path vulnerability in csi in Chicken before 4
ghsa_unreviewed·2022-05-17
CVE-2013-1874 [MEDIUM] GHSA-53x9-4x79-73hc: Untrusted search path vulnerability in csi in Chicken before 4
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
OSV
CVE-2013-1874: Untrusted search path vulnerability in csi in Chicken before 4
osv·2014-09-29·CVSS 4.4
CVE-2013-1874 [MEDIUM] CVE-2013-1874: Untrusted search path vulnerability in csi in Chicken before 4
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
Debian
CVE-2013-1874: chicken - Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local ...
vendor_debian·2013·CVSS 4.4
CVE-2013-1874 [MEDIUM] CVE-2013-1874: chicken - Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local ...
Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.
Scope: local
bookworm: resolved (fixed in 4.8.0.3-1)
bullseye: resolved (fixed in 4.8.0.3-1)
forky: resolved (fixed in 4.8.0.3-1)
sid: resolved (fixed in 4.8.0.3-1)
trixie: resolved (fixed in 4.8.0.3-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=blob%3Bf=NEWS%3Bh=c21c7cf9d1faf4f78736890ac7ca1d4b82d72ddd%3Bhb=c6750af99ada7fa4815ee834e4e705bcfac9c137http://seclists.org/oss-sec/2013/q1/692http://www.osvdb.org/91520http://www.securityfocus.com/bid/58583https://exchange.xforce.ibmcloud.com/vulnerabilities/85065http://code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=blob%3Bf=NEWS%3Bh=c21c7cf9d1faf4f78736890ac7ca1d4b82d72ddd%3Bhb=c6750af99ada7fa4815ee834e4e705bcfac9c137http://seclists.org/oss-sec/2013/q1/692http://www.osvdb.org/91520http://www.securityfocus.com/bid/58583https://exchange.xforce.ibmcloud.com/vulnerabilities/85065
2014-09-29
Published