CVE-2009-3894: Dag.wieers Dstat

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Affected products

• Dag.wieers Dstat: up to and including 0.6.9; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2009-11-29. Last modified 2026-06-16.