CVE-2008-4394

no score yetEPSS 0.3%

gentoo portage: no CVSS score yet. EPSS 0.3% chance of exploitation in the next 30 days.

Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds.

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
Published: 2008-10-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gentoo:portage

References

http://secunia.com/advisories/32228
http://security.gentoo.org/glsa/glsa-200810-02.xml
http://www.securityfocus.com/bid/31670
https://exchange.xforce.ibmcloud.com/vulnerabilities/45792
http://secunia.com/advisories/32228

Check your stack JSON