CVE-2008-2378

Published: 26 November 2008

Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of the -k option.

Priority

Status

Package	Release	Status
hf Launchpad, Ubuntu, Debian	dapper	Released (0.7.3-2ubuntu0.1)
	gutsy	Released
	hardy	Released (0.8-5ubuntu0.1)
	intrepid	Released (0.8-8ubuntu0.1)
	jaunty	Does not exist
	upstream	Released (0.8-8.1)

References

https://www.cve.org/CVERecord?id=CVE-2008-2378
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/ubuntu/+source/hf/+bug/320082

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›