Description
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.
References
- 34092 vdb-entry
- USN-732-1 vendor-advisory
- dash-profile-code-execution(49216) vdb-entry
- 34205 third-party-advisory