Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4001
HistoryNov 06, 2010 - 12:00 a.m.

CVE-2010-4001

2010-11-0600:00:00
ubuntu.com
ubuntu.com
3

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

DISPUTED GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length
directory name in the LD_LIBRARY_PATH, which allows local users to gain
privileges via a Trojan horse shared library in the current working
directory. NOTE: CVE disputes this issue because the GMXLDLIB value is
always added to the beginning of LD_LIBRARY_PATH at a later point in the
script.

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%