Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-3381

Опубликовано: 20 окт. 2010
Источник: nvd
CVSS2: 6.9
EPSS Низкий

Описание

The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0.3.2.2 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:alex_launi:tangerine:0.3.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00046
Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 15 лет назад

The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0.3.2.2 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

debian
больше 15 лет назад

The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0. ...

github
больше 3 лет назад

The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0.3.2.2 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

EPSS

Процентиль: 14%
0.00046
Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other