Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/dev-util/catfish@1.0.2
purl pkg:ebuild/dev-util/catfish@1.0.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-3jhf-fsc5-u3a1 Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory. CVE-2014-2096
VCID-ezk3-7su9-83e7 Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory. CVE-2014-2095
VCID-qztv-k3h5-bydw Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory. CVE-2014-2094
VCID-stw1-18ae-mfas Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory. CVE-2014-2093

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T19:12:20.050120+00:00 Gentoo Importer Fixing VCID-3jhf-fsc5-u3a1 https://security.gentoo.org/glsa/201408-04 38.6.0
2026-06-04T19:12:20.033763+00:00 Gentoo Importer Fixing VCID-ezk3-7su9-83e7 https://security.gentoo.org/glsa/201408-04 38.6.0
2026-06-04T19:12:20.016811+00:00 Gentoo Importer Fixing VCID-qztv-k3h5-bydw https://security.gentoo.org/glsa/201408-04 38.6.0
2026-06-04T19:12:19.999904+00:00 Gentoo Importer Fixing VCID-stw1-18ae-mfas https://security.gentoo.org/glsa/201408-04 38.6.0