CVE-2005-4791 Path traversal in n/a

What is CVE-2005-4791?

CVE-2005-4791 is a low-severity path traversal vulnerability in n/a, published on 26 Apr 2006. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

Which versions are affected by CVE-2005-4791?

It affects 1 product.

Products include Novell Suse Linux.

How do I fix CVE-2005-4791?

Apply the vendor's patch.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2005-4791 being exploited?

There is no known exploitation of CVE-2005-4791 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2010-3912 Information disclosure in n/a Critical 10.0
• CVE-2010-3110 Memory corruption in n/a High 7.2
• CVE-2005-4790 Path traversal in n/a Medium 6.9
• CVE-2010-1507 Hardcoded credentials in n/a Medium 5.0
• CVE-2006-0803 Security feature bypass in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2005-4791, GHSA-53f4-27hf-367h, openSUSE-SU-2024:11020-1.