Описание
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Ссылки
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:bareftp:bareftp:0.3.4:*:*:*:*:*:*:*
EPSS
Процентиль: 24%
0.00318
Низкий
6.9 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
ubuntu
почти 16 лет назад
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
debian
почти 16 лет назад
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PA ...
github
около 4 лет назад
bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
EPSS
Процентиль: 24%
0.00318
Низкий
6.9 Medium
CVSS2
Дефекты
CWE-20