Launchpad.net

CVE 2014-2093

Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.

See the CVE page on Mitre.org for more details.