PT-2010-4781

Name of the Vulnerable Software and Affected Versions TuxGuitar version 1.2 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to TuxGuitar placing a zero-length directory name in the LD LIBRARY PATH...

PT-2010-4780

Name of the Vulnerable Software and Affected Versions TORCS version 1.3.1 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the torcs, nfsperf, accc, texmapper, trackgen, and nfs2ac scripts in TORCS placi...

PT-2010-4779

Name of the Vulnerable Software and Affected Versions TeamSpeak versions 2.0.32 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the teamspeak and teamspeak-server scripts placing a zero-length directory...

PT-2010-4778

Name of the Vulnerable Software and Affected Versions Tuning and Analysis Utilities TAU version 2.16.4 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to tauex in Tuning and Analysis Utilities TAU placing ...

PT-2010-4768

Name of the Vulnerable Software and Affected Versions Mistelix version 0.31 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is possible because Mistelix 0.31 places a zero-length directory name in the LD LIBRARY...

CVE-2010-3358: Undefined Security Weakness

HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3353: Undefined Security Weakness

Cowbell 0.2.7.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3350: Improper Input Validation

bareFTP 0.3.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-4765

Name of the Vulnerable Software and Affected Versions lastfm version 1.5.4 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to lastfm placing a zero-length directory name in the LD LIBRARY PATH...

PT-2010-4761

Name of the Vulnerable Software and Affected Versions gnome-subtitles version 1.0 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to gnome-subtitles placing a zero-length directory name in the LD LIBRARY...

CVE-2010-3385: Undefined Security Weakness

TuxGuitar 1.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3349: Undefined Security Weakness

Ardour 2.8.11 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3182

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan hor...

PT-2010-4624

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.14 Mozilla Firefox versions 3.6.x prior to 3.6.11 Thunderbird versions prior to 3.0.9 Thunderbird versions 3.1.x prior to 3.1.5 SeaMonkey versions prior to 2.0.9 Description The issue allows local users to...

CVE-2010-3374

Qt Creator before 2.0.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3374

Qt Creator before 2.0.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

Qt Creator before 2.0.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3374

Qt Creator before 2.0.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-4772

Name of the Vulnerable Software and Affected Versions Qt Creator versions prior to 2.0.1 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to Qt Creator placing a zero-length directory name in the LD LIBRARY...

CVE-2010-3374: Undefined Security Weakness

Qt Creator before 2.0.1 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...