559 matches found
CVE-2010-3384
The 1 torcs, 2 nfsperf, 3 accc, 4 texmapper, 5 trackgen, and 6 nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
Directory traversal
bareFTP 0.3.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
Directory traversal
The 1 scilab, 2 scilab-cli, and 3 scilab-adv-cli scripts in Scilab 5.2.2 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3383
The 1 teamspeak and 2 teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3364
The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3389
CVE-2010-3389 affects the SAPDatabase and SAPInstance scripts in OCF Resource Agents (resource-agents) 1.0.3 used by Linux-HA. The vulnerability arises from placing a zero-length directory name in LD_LIBRARY_PATH, enabling a local attacker to load a Trojan horse shared library from the current wo...
CVE-2010-3360
Hipo 0.6.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3357
CVE-2010-3357 affects gnome-subtitles 1.0 , where a zero-length directory name in the LD_LIBRARY_PATH allows local users to gain privileges via a Trojan horse shared library in the current working directory. Root cause: manipulation of LD_LIBRARY_PATH. Impact: local privilege escalation (as descr...
CVE-2010-3349
Ardour 2.8.11 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3360
CVE-2010-3360 affects Hipo 0.6.1. The vulnerability arises from a zero-length directory name placed into LD_LIBRARY_PATH, enabling a local attacker to load a Trojan horse shared library from the current working directory and gain privileges. The available sources describe the issue and impact but...
CVE-2010-3350
bareFTP 0.3.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3364
VIPS (image processing library) vulnerability CVE-2010-3364 affects VIPS up to 7.22.x, where a zero-length directory name placed in LD_LIBRARY_PATH may cause the current directory to be searched for dynamic libraries, enabling local privilege escalation. Gentoo GLSA 201401-29 cites that upgrading...
CVE-2010-3382
tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3369
The 1 mdb and 2 mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3366
MnFit 5.13 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3394
The 1 texmacs and 2 tmmupadhelp scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3355
Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3389
The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2010-3354
dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...