Name: CVE-2008-3277: Improper Limitation of a Pathname to a Restricted Directory
Creator: Rapid7
Published: 2014-04-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2008-3277, CWE-22, CVSS 5.3, EPSS 0.00042

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.

CVSS Details

CVSS 3.1 Base Score: 5.3

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Oracle_linux	—	Upgrade ibutilsUpgrade ibutils-libsUpgrade ibutils-devel	Oct 16, 2024	Apr 15, 2014
Redhat_linux	—	No solution exists	Jul 9, 2025	Jun 12, 2008
Suse	—	Upgrade ibutils-develUpgrade ibutils-32bitUpgrade ibutilsUpgrade ibutils-devel-32bit	Aug 9, 2024	Jun 28, 2013

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence