AZL-109584
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109584.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109584
- Upstream
- CVE-2008-5983
- Published
- 2009-01-28T02:30:00Z
- Modified
- 2026-10-27T05:36:16Z
- Summary
- CVE-2008-5983 affecting package python-py 1.11.0-1
- Details
-
Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.
- References