Directory traversal

2010-10-2018:00:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CPENameOperatorVersion
bristoleq0.60.5
bristoleq0.40.8
bristoleq0.10.11
bristoleq0.9.5-37
bristoleq0.30.1
bristoleq0.10.2
bristoleq0.9.4-57
bristoleq0.30.7
bristoleq0.40.3
bristoleq0.50.2

Name	Operator	Version
bristol	eq	0.60.5
bristol	eq	0.40.8
bristol	eq	0.10.11
bristol	eq	0.9.5-37
bristol	eq	0.30.1
bristol	eq	0.10.2
bristol	eq	0.9.4-57
bristol	eq	0.30.7
bristol	eq	0.40.3
bristol	eq	0.50.2