Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-3364HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3364
2022-10-0316:20:56
Debian Security Bug Tracker
security-tracker.debian.org
12
vips
vulnerability
vips-7.22
ld_library_path
local users
trojan horse
shared library
gain privileges
unix
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | vips | < 7.14.5-2 | vips_7.14.5-2_all.deb |
| Debian | 11 | all | vips | < 7.14.5-2 | vips_7.14.5-2_all.deb |
| Debian | 10 | all | vips | < 7.14.5-2 | vips_7.14.5-2_all.deb |
| Debian | 999 | all | vips | < 7.14.5-2 | vips_7.14.5-2_all.deb |
| Debian | 13 | all | vips | < 7.14.5-2 | vips_7.14.5-2_all.deb |
Related
nessus
nessus
Fedora 14 : nip2-7.24.2-1.fc14 / vips-7.24.7-2.fc14 (2011-10781)
2011-08-23 00:00:00
Fedora 15 : nip2-7.24.2-1.fc15 / vips-7.24.7-2.fc15 (2011-10808)
2011-08-23 00:00:00
Fedora 16 : nip2-7.24.2-1.fc16 / vips-7.24.7-2.fc16 (2011-10769)
2011-08-24 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201401-29
2015-09-29 00:00:00
Fedora Update for nip2 FEDORA-2011-10808
2011-08-27 00:00:00
Fedora Update for nip2 FEDORA-2011-10781
2011-08-27 00:00:00
gentoo
gentoo
VIPS: Privilege Escalation
2014-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: nip2-7.24.2-1.fc14
2011-08-23 04:33:05
[SECURITY] Fedora 14 Update: vips-7.24.7-2.fc14
2011-08-23 04:33:05
[SECURITY] Fedora 16 Update: nip2-7.24.2-1.fc16
2011-08-23 20:27:01
cvelist
cvelist
CVE-2010-3364
2022-10-03 16:20:56
cve
cve
CVE-2010-3364
2022-10-03 16:20:56
altlinux
altlinux
Security fix for the ALT Linux 5 package vips version 7.22.4-alt0.M50P.1
2010-10-19 00:00:00
Security fix for the ALT Linux 5 package vips version 7.22.3-alt1
2010-10-16 00:00:00
ubuntucve
ubuntucve
CVE-2010-3364
2010-10-20 00:00:00
prion
prion
Directory traversal
2010-10-20 18:00:00
nvd
nvd
CVE-2010-3364
2010-10-20 18:00:04
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Related for DEBIANCVE:CVE-2010-3364