Lucene search
HistoryOct 20, 2010 - 6:00 p.m.
CVE-2010-3364
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Affected configurations
Node
vipsvipsMatch7.22.2
Related
nessus
nessus
Fedora 14 : nip2-7.24.2-1.fc14 / vips-7.24.7-2.fc14 (2011-10781)
2011-08-23 00:00:00
Fedora 15 : nip2-7.24.2-1.fc15 / vips-7.24.7-2.fc15 (2011-10808)
2011-08-23 00:00:00
Fedora 16 : nip2-7.24.2-1.fc16 / vips-7.24.7-2.fc16 (2011-10769)
2011-08-24 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201401-29
2015-09-29 00:00:00
Fedora Update for nip2 FEDORA-2011-10808
2011-08-27 00:00:00
Fedora Update for nip2 FEDORA-2011-10781
2011-08-27 00:00:00
gentoo
gentoo
VIPS: Privilege Escalation
2014-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: nip2-7.24.2-1.fc14
2011-08-23 04:33:05
[SECURITY] Fedora 14 Update: vips-7.24.7-2.fc14
2011-08-23 04:33:05
[SECURITY] Fedora 16 Update: nip2-7.24.2-1.fc16
2011-08-23 20:27:01
cvelist
cvelist
CVE-2010-3364
2022-10-03 16:20:56
cve
cve
CVE-2010-3364
2022-10-03 16:20:56
altlinux
altlinux
Security fix for the ALT Linux 5 package vips version 7.22.4-alt0.M50P.1
2010-10-19 00:00:00
Security fix for the ALT Linux 5 package vips version 7.22.3-alt1
2010-10-16 00:00:00
ubuntucve
ubuntucve
CVE-2010-3364
2010-10-20 00:00:00
prion
prion
Directory traversal
2010-10-20 18:00:00
debiancve
debiancve
CVE-2010-3364
2022-10-03 16:20:56
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2010-3364