CVE-2015-3887 - Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path

Back Back to CVE browser

HIGH

Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path

Published Sep 21, 2017

7.8

HIGH

CVSS 3.0

EPSS 0.49%

Description

Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (6)

http://www.openwall.com/lists/oss-security/2015/05/13/11
mailing-listx_refsource_MLISTIssue TrackingMailing ListPatchThird Party Advisory
http://www.securityfocus.com/bid/74648
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1147013
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/rofl0r/proxychains-ng/blob/v4.9/README#L56
x_refsource_CONFIRMIssue TrackingRelease Notes
https://github.com/rofl0r/proxychains-ng/commit/9ab7dbeb3baff67a51d0c5e71465c453be0890b5#diff-803c5170888b8642f2a97e5e9423d399
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/rofl0r/proxychains-ng/issues/60
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2015/05/13/11		mailing-listx_refsource_MLISTIssue TrackingMailing ListPatchThird Party Advisory
http://www.securityfocus.com/bid/74648		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1147013		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/rofl0r/proxychains-ng/blob/v4.9/README#L56		x_refsource_CONFIRMIssue TrackingRelease Notes
https://github.com/rofl0r/proxychains-ng/commit/9ab7dbeb3baff67a51d0c5e71465c453be0890b5#diff-803c5170888b8642f2a97e5e9423d399		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/rofl0r/proxychains-ng/issues/60		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 21, 2017

Updated Aug 6, 2024

Reserved May 12, 2015

Link CVE-2015-3887

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-3887

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-3887