gedit 'PySys_SetArgv' Remote Command Execution Vulnerability

Bugtraq ID:	33445
Class:	Design Error
CVE:	CVE-2009-0314
Remote:	Yes
Local:	No
Published:	Jan 26 2009 12:00AM
Updated:	Apr 13 2015 09:15PM
Credit:	Jan Lieskovsky
Vulnerable:	Redhat Linux 5.0 Redhat Linux 5.x Redhat Enterprise Linux WS 5 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 GNOME gEdit 2.24.1 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 GNOME gEdit 2.22.2 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 GNOME gEdit 2.16 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 GNOME gEdit 2.10.2 + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu Ubuntu Linux 5.0 4 amd64 GNOME gEdit 2.8.3 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 GNOME gEdit 2.8.1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 GNOME gEdit 2.2 .0 GNOME gEdit 2.0.2 Gentoo Linux
Not Vulnerable:

gedit 'PySys_SetArgv' Remote Command Execution Vulnerability

The 'gedit' program is prone to a remote command-execution vulnerability.

An attacker could exploit this issue by enticing an unsuspecting victim to execute the vulnerable application in a directory containing a malicious Python file. A successful exploit will allow arbitrary Python commands to run with the privileges of the currently logged-in user.

gedit 'PySys_SetArgv' Remote Command Execution Vulnerability

An attacker may exploit this issue using commonly available tools.

gedit 'PySys_SetArgv' Remote Command Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva gedit-2.22.0-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva gedit-devel-2.22.0-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva gedit-2.22.0-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva gedit-devel-2.22.0-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0

• Mandriva gedit-2.24.0-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva gedit-devel-2.24.0-1.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva gedit-2.24.0-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva gedit-devel-2.24.0-1.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

gedit 'PySys_SetArgv' Remote Command Execution Vulnerability

References:

• Bugzilla Bug 481556 gedit: untrusted python modules search path (Jan Lieskovsky)
  
• gEdit Homepage (GNOME)