Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-4005HistoryNov 06, 2010 - 12:00 a.m.
CVE-2010-4005
2010-11-0600:00:00
Debian Security Bug Tracker
security-tracker.debian.org
5
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: vector 1 exists because of an incorrect fix for CVE-2005-4790.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | tomboy | < 1.14.1-4 | tomboy_1.14.1-4_all.deb |
Related
nessus
nessus
GLSA-201401-28 : Tomboy: Privilege escalation
2014-01-27 00:00:00
Mandriva Linux Security Advisory : tomboy (MDVSA-2011:035)
2011-02-23 00:00:00
Fedora 15 : tomboy-1.6.0-1.fc15 (2011-7997)
2011-06-16 00:00:00
openvas
openvas
Mandriva Update for tomboy MDVSA-2011:035 (tomboy)
2011-02-28 00:00:00
Mandriva Update for tomboy MDVSA-2011:035 (tomboy)
2011-02-28 00:00:00
Gentoo Security Advisory GLSA 201401-28
2015-09-29 00:00:00
cve
cve
CVE-2010-4005
2010-11-06 00:00:00
CVE-2005-4790
2005-12-31 05:00:00
ubuntucve
ubuntucve
CVE-2010-4005
2010-11-06 00:00:00
CVE-2005-4790
2005-12-31 00:00:00
securityvulns
securityvulns
[ MDVSA-2011:035 ] tomboy
2011-02-26 00:00:00
tomboy code execution
2011-02-26 00:00:00
prion
prion
Directory traversal
2010-11-06 00:00:00
gentoo
gentoo
Tomboy: Privilege escalation
2014-01-26 00:00:00
Tomboy: User-assisted execution of arbitrary code
2007-11-08 00:00:00
Blam: User-assisted execution of arbitrary code
2008-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: tomboy-1.6.0-1.fc14
2011-06-15 18:36:55
[SECURITY] Fedora 7 Update: blam-1.8.3-10.fc7
2007-11-29 01:45:27
[SECURITY] Fedora 7 Update: tomboy-0.6.1-2.fc7
2007-11-09 23:41:17
debiancve
debiancve
CVE-2005-4790
2005-12-31 05:00:00
redhatcve
redhatcve
CVE-2005-4790
2019-10-04 20:52:18
ubuntu
ubuntu
Tomboy vulnerability
2008-01-07 00:00:00
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related for DEBIANCVE:CVE-2010-4005