CVE:CVE-2009-3894
CNNVD:CNNVD-200911-288
dstat中存在多个不可信的搜索路径参数。本地用户可以借助当前的工作目录或当前的工作目录的特定子目录中的特洛伊木马Python模块，获得特权。
solution:Upgrade dag.wieers dstat to a higher version than 0.6.9,0.1,0.2,0.3,0.4,0.5,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8,0.5.9,0.5.10,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8,and avoid the version (,0.6.9],0.1,0.2,0.3,0.4,0.5,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.5.8,0.5.9,0.5.10,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.6.8