Описание
lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:last:last.fm:1.5.4:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00046
Низкий
6.9 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
ubuntu
около 15 лет назад
lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
debian
около 15 лет назад
lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PAT ...
github
больше 3 лет назад
lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
EPSS
Процентиль: 14%
0.00046
Низкий
6.9 Medium
CVSS2
Дефекты
NVD-CWE-Other