VYPR
← All advisories
High severityNVD Advisory· Published May 17, 2005· Updated Jun 16, 2026

CVE-2005-1632

CVE-2005-1632

Description

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
cheetahPyPI
>= 0.9.15, <= 0.9.16—

Affected products

4
  • Cheetah/Cheetah3 versions
    cpe:2.3:a:tavis_rudd:cheetah:0.9.15:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:tavis_rudd:cheetah:0.9.15:*:*:*:*:*:*:*
    • cpe:2.3:a:tavis_rudd:cheetah:0.9.16:*:*:*:*:*:*:*
    • (no CPE)range: = 0.9.15, = 0.9.16
  • ghsa-coords
    pkg:pypi/cheetah
    Range: >= 0.9.15, <= 0.9.16

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.