Lucene search

K
cvelistMitreCVELIST:CVE-2010-3393
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3393

2022-10-0316:20:54
mitre
www.cve.org
magics++ 2.10.0
vulnerability
trojan horse
directory name
ld_library_path
gain privileges

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVELIST:CVE-2010-3393