PT-2010-4774

Name of the Vulnerable Software and Affected Versions SALOME version 5.1.3 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the runSalome, runTestMedCorba, runLightSalome, and hxx2salome scripts placing ...

PT-2010-4778

Name of the Vulnerable Software and Affected Versions Tuning and Analysis Utilities TAU version 2.16.4 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to tauex in Tuning and Analysis Utilities TAU placing ...

PT-2010-4781

Name of the Vulnerable Software and Affected Versions TuxGuitar version 1.2 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to TuxGuitar placing a zero-length directory name in the LD LIBRARY PATH...

PT-2010-4780

Name of the Vulnerable Software and Affected Versions TORCS version 1.3.1 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the torcs, nfsperf, accc, texmapper, trackgen, and nfs2ac scripts in TORCS placi...

PT-2010-4779

Name of the Vulnerable Software and Affected Versions TeamSpeak versions 2.0.32 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the teamspeak and teamspeak-server scripts placing a zero-length directory...

PT-2010-4777

Name of the Vulnerable Software and Affected Versions Tangerine version 0.3.2.2 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the tangerine and tangerine-properties scripts placing a zero-length...

PT-2010-4767

Name of the Vulnerable Software and Affected Versions VIPS version 7.22.2 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the vips-7.22 script placing a zero-length directory name in the LD LIBRARY PATH...

PT-2010-4775

Name of the Vulnerable Software and Affected Versions Scilab version 5.2.2 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the scilab, scilab-cli, and scilab-adv-cli scripts placing a zero-length...

PT-2010-4755

Name of the Vulnerable Software and Affected Versions Ardour version 2.8.11 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to Ardour placing a zero-length directory name in the LD LIBRARY PATH...

PT-2010-4766

Name of the Vulnerable Software and Affected Versions roaraudio version 0.3 Description The issue in roaraudio allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to roarify placing a zero-length directory name in the LD LIBRARY...

PT-2010-4782

Name of the Vulnerable Software and Affected Versions LTTng Userspace Tracer aka UST version 0.7 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to usttrace in LTTng Userspace Tracer placing a zero-length...

PT-2010-4758

Name of the Vulnerable Software and Affected Versions Cowbell version 0.2.7.1 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to Cowbell placing a zero-length directory name in the LD LIBRARY PATH...

PT-2010-4757

Name of the Vulnerable Software and Affected Versions startBristol version 0.60.5 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to a zero-length directory name being placed in the LD LIBRARY PATH...

KLA10360 LPE vulnerability in TeamSpeak

An improper library path was found in TeamSpeak. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a library hijack. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products TeamSpeak-Clie...

Mozilla unsafe library loading flaw

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan hor...

Debian Security Advisory DSA 2107-1 (couchdb)

The remote host is missing an update to couchdb announced via advisory DSA 2107-1. OpenVAS Vulnerability Test $Id: deb21071.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2107-1 couchdb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

DEBIAN-CVE-2010-3374

Qt Creator before 2.0.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

UBUNTU-CVE-2010-3380

The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-4776

Name of the Vulnerable Software and Affected Versions SLURM versions prior to 2.1.14 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the init.d/slurm and init.d/slurmdbd scripts placing the . dot...

iDefense Security Advisory 08.01.08: Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability

iDefense Security Advisory 08.01.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 01, 2008 I. BACKGROUND Ingres Database is a database server used in several Computer Associates' products. For example, CA Directory Service use thes Ingres Database server. More information can be foun...