Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3394
security
privilege escalation
cve-2010-3394
texmacs
scripts
local users
trojan horse
directory traversal
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The (1) texmacs and (2) tm_mupad_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Affected configurations
Node
texmacstexmacsMatch1.0.7.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| texmacs:texmacs | texmacs | eq | 1.0.7.4 |
Related
openvas
openvas
Fedora Update for TeXmacs FEDORA-2011-2127
2011-03-08 00:00:00
Fedora Update for TeXmacs FEDORA-2011-2127
2011-03-08 00:00:00
Gentoo Security Advisory GLSA 201401-27
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: TeXmacs-1.0.7.9-2.fc13
2011-03-05 02:33:02
[SECURITY] Fedora 14 Update: TeXmacs-1.0.7.9-2.fc14
2011-03-05 02:36:35
[SECURITY] Fedora 15 Update: TeXmacs-1.0.7.9-2.fc15
2011-03-03 03:34:15
ubuntucve
ubuntucve
CVE-2010-3394
2010-10-20 00:00:00
nessus
nessus
Fedora 14 : TeXmacs-1.0.7.9-2.fc14 (2011-2127)
2011-03-07 00:00:00
Fedora 15 : TeXmacs-1.0.7.9-2.fc15 (2011-2247)
2011-03-03 00:00:00
GLSA-201401-27 : GNU TeXmacs: Privilege escalation
2014-01-27 00:00:00
nvd
nvd
CVE-2010-3394
2010-10-20 18:00:04
altlinux
altlinux
Security fix for the ALT Linux 5 package TeXmacs version 1.0.7.7-alt1
2010-10-23 00:00:00
Security fix for the ALT Linux 5 package TeXmacs version 1.0.7.7-alt0.M50P.1
2010-11-12 00:00:00
prion
prion
Directory traversal
2010-10-20 18:00:00
gentoo
gentoo
GNU TeXmacs: Privilege escalation
2014-01-26 00:00:00
cvelist
cvelist
CVE-2010-3394
2022-10-03 16:20:56
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2010-3394