← Vulnerability feed

Vulnerability record · CVE-2009-0367 · published 5 March 2009

CVE-2009-0367: Wesnoth permissions and access controls vulnerability

Wesnoth · Wesnoth

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.

9.3 CVSS 2.0 High EPSS 11% · top 4.3% CWE-264 · Permissions and access controls
9.3CVSS 2.0 base score
11%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
26References
16 Jun 2026Last modified by NVD

Description

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://launchpad.net/bugs/335089
http://launchpad.net/bugs/336396
http://launchpad.net/bugs/cve/2009-0367
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog
http://secunia.com/advisories/34058 Vendor Advisory
http://secunia.com/advisories/34236
http://www.debian.org/security/2009/dsa-1737
http://www.vupen.com/english/advisories/2009/0595 PatchVendor Advisory
http://www.wesnoth.org/forum/viewtopic.php?t=24247 PatchVendor Advisory
http://www.wesnoth.org/forum/viewtopic.php?t=24340 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49058
https://gna.org/bugs/index.php?13048
http://launchpad.net/bugs/335089
http://launchpad.net/bugs/336396
http://launchpad.net/bugs/cve/2009-0367
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog
http://secunia.com/advisories/34058 Vendor Advisory
http://secunia.com/advisories/34236
http://www.debian.org/security/2009/dsa-1737
http://www.vupen.com/english/advisories/2009/0595 PatchVendor Advisory
http://www.wesnoth.org/forum/viewtopic.php?t=24247 PatchVendor Advisory
http://www.wesnoth.org/forum/viewtopic.php?t=24340 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49058
https://gna.org/bugs/index.php?13048

Track CVE-2009-0367 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2007-5742Wesnoth path traversal vulnerabilityDirectory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to …EPSS 2.8%7.8CVE-2007-3917Wesnoth vulnerabilityThe multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long mes…EPSS 2.1%7.5CVE-2007-6201Wesnoth vulnerabilityUnspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty …EPSS 1.5%5.0CVE-2009-0878Wesnoth vulnerabilityThe read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consu…EPSS 1.8%4.3CVE-2009-0366Wesnoth vulnerabilityThe uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large…EPSS 2.0%5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed7.8CVE-2016-3643SolarWinds Virtualization Manager sudo misconfiguration privilege escalationSolarWinds Virtualization Manager 6.3.1 and earlier ship with a misconfigured sudo policy that lets a local user run privileged commands, as shown by…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2009-0367), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.