CVE-2013-4482 Information

Description

Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0 when started using the initscript allows local users to gain privileges via a Trojan horse .egg-info file in the (1) current working directory or (2) its parent directories.

Reference

http://rhn.redhat.com/errata/RHSA-2013-1603.html https://bugzilla.redhat.com/show_bug.cgi?id=990321