Описание
usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ust | fixed | 0.7-2.1 | package | |
| ust | fixed | 0.5-1+squeeze1 | squeeze | package |
| ust | fixed | 0.5-1+squeeze1 | wheezy | package |
EPSS
Процентиль: 14%
0.00046
Низкий
Связанные уязвимости
nvd
больше 15 лет назад
usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
github
больше 3 лет назад
usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
EPSS
Процентиль: 14%
0.00046
Низкий