VULNERABILITY INTELLIGENCE

CVE-2005-0457

CVSS score7.2 HIGH

EPSS probability0.41%

CISA KEVNot currently listed

Published2005-05-02

Last modified2026-06-16

CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.

Weakness classification

CWE-427: Uncontrolled Search Path Element

Primary references

cve@mitre.org — Third Party Advisory, Vendor Advisory
cve@mitre.org — Patch, Third Party Advisory, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, Vendor Advisory