Description
Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | openoffice.org +3 | 1.1.5-10.6.0.5.EL4 | RHSA-2008:0538 |
| RHEL 3 | openoffice.org +2 | 1.1.2-42.2.0.EL3 | RHSA-2008:0538 |
Advisories 1
- RHSA-2008:0538 Red Hat Security Advisory: openoffice.org security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=450532
- 30633 third-party-advisory
- 29695 vdb-entry
- oval:org.mitre.oval:def:11361 vdb-entry signature
- redhat-ooo-buildscript-code-execution(43322) vdb-entry
- RHSA-2008:0538 vendor-advisory
- 1020278 vdb-entry