Mandriva Linux Security Advisory 2009-057 – Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious –db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario. The updated packages have been patched to prevent this.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75217/MDVSA-2009-057.txt
Source: https://packetstormsecurity.com/files/75217/Mandriva-Linux-Security-Advisory-2009-057.html