Catfish '/usr/bin/catfish' Local Privilege Escalation Vulnerability

Bugtraq ID:	65761
Class:	Design Error
CVE:	CVE-2014-2093
Remote:	No
Local:	Yes
Published:	Feb 24 2014 12:00AM
Updated:	Apr 13 2015 09:21PM
Credit:	The vendor reported this issue.
Vulnerable:	Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Gentoo Linux Debian catfish 1.0.0-2
Not Vulnerable:

Catfish '/usr/bin/catfish' Local Privilege Escalation Vulnerability

Catfish is prone to a local privilege-escalation vulnerability.

An attackers can exploit this issue to execute arbitrary code with elevated privileges.

Catfish '/usr/bin/catfish' Local Privilege Escalation Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to run the application from a new working directory.

Catfish '/usr/bin/catfish' Local Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].


Mandriva Business Server 1 X86 64

• Mandriva catfish-0.3.2-6.1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/

Catfish '/usr/bin/catfish' Local Privilege Escalation Vulnerability

References:

• Debian catfish Homepage (Debian)
  
• Catfish - RedHat Advisory (RedHat)
  
• catfish Bug Report - 739958 (Debian)
  
• CVE-2014-2093 (Red HAt)