Tomboy: User-assisted execution of arbitrary code — GLSA 200711-12

Tomboy doesn't properly handle environment variables, potentially allowing a local attacker to execute arbitrary code.

Affected packages

Background

Tomboy is a GTK-based desktop note-taking application written in C# and the Mono C#.

Description

Jan Oravec reported that the "/usr/bin/tomboy" script sets the "LD_LIBRARY_PATH" environment variable incorrectly, which might result in the current working directory (.) to be included when searching for dynamically linked libraries of the Mono Runtime application.

Impact

A local attacker could entice a user into running Tomboy in a directory containing a specially crafted library file to execute arbitrary code with the privileges of the user running Tomboy.

Workaround

Do not run Tomboy from an untrusted working directory.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-misc/tomboy-0.8.1-r1"

References

• CVE-2005-4790

Release date
November 08, 2007

Latest revision
November 08, 2007: 01

Severity
normal

Exploitable
local

Bugzilla entries

• 189249