Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Python Untrusted Search Path Vulnerability - CVE-2008-5983 - Vulnerability Database
Python

Python Untrusted Search Path Vulnerability - CVE-2008-5983

Medium
Reference: CVE-2008-5983
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-5983
Title: Python Untrusted Search Path Vulnerability
Overview:

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier and possibly later versions prepends an empty string to sys.path when the argv0 argument does not contain a path separator which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.