CVE-2008-0302

Publication date 17 January 2008

Last updated 24 July 2024

Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
apt-listchanges	7.10 gutsy	Fixed 2.74ubuntu3.1
	7.04 feisty	Fixed 2.72ubuntu6.1
	6.10 edgy	Not affected
	6.06 LTS dapper	Not affected

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-572-1
apt-listchanges vulnerability
18 January 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2008-0302