Lucene search
Ubuntu.comUB:CVE-2010-4005HistoryNov 06, 2010 - 12:00 a.m.
CVE-2010-4005
2010-11-0600:00:00
ubuntu.com
ubuntu.com
4
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and
earlier place a zero-length directory name in the LD_LIBRARY_PATH, which
allows local users to gain privileges via a Trojan horse shared library in
the current working directory. NOTE: vector 1 exists because of an
incorrect fix for CVE-2005-4790.2.
Related
nessus
nessus
GLSA-201401-28 : Tomboy: Privilege escalation
2014-01-27 00:00:00
Mandriva Linux Security Advisory : tomboy (MDVSA-2011:035)
2011-02-23 00:00:00
Fedora 15 : tomboy-1.6.0-1.fc15 (2011-7997)
2011-06-16 00:00:00
openvas
openvas
Mandriva Update for tomboy MDVSA-2011:035 (tomboy)
2011-02-28 00:00:00
Gentoo Security Advisory GLSA 201401-28
2015-09-29 00:00:00
Mandriva Update for tomboy MDVSA-2011:035 (tomboy)
2011-02-28 00:00:00
cve
cve
CVE-2010-4005
2010-11-06 00:00:00
CVE-2005-4790
2005-12-31 05:00:00
debiancve
debiancve
CVE-2010-4005
2010-11-06 00:00:00
CVE-2005-4790
2005-12-31 05:00:00
securityvulns
securityvulns
tomboy code execution
2011-02-26 00:00:00
[ MDVSA-2011:035 ] tomboy
2011-02-26 00:00:00
prion
prion
Directory traversal
2010-11-06 00:00:00
gentoo
gentoo
Tomboy: Privilege escalation
2014-01-26 00:00:00
Blam: User-assisted execution of arbitrary code
2008-01-27 00:00:00
Tomboy: User-assisted execution of arbitrary code
2007-11-08 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: tomboy-1.6.0-1.fc14
2011-06-15 18:36:55
[SECURITY] Fedora 7 Update: tomboy-0.6.1-2.fc7
2007-11-09 23:41:17
[SECURITY] Fedora 8 Update: blam-1.8.3-12.fc8
2007-11-29 01:48:08
ubuntucve
ubuntucve
CVE-2005-4790
2005-12-31 00:00:00
redhatcve
redhatcve
CVE-2005-4790
2019-10-04 20:52:18
ubuntu
ubuntu
Tomboy vulnerability
2008-01-07 00:00:00
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Related for UB:CVE-2010-4005