Описание
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | released | 3.6.11+build3+nobinonly-0ubuntu0.10.10.1 |
| hardy | ignored | end of life |
| jaunty | DNE | |
| karmic | DNE | |
| lucid | released | 3.6.11+build3+nobinonly-0ubuntu0.10.04.1 |
| maverick | released | 3.6.11+build3+nobinonly-0ubuntu0.10.10.1 |
| natty | released | 3.6.11+build3+nobinonly-0ubuntu0.10.10.1 |
| upstream | released | 3.6.11 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | released | 3.6.11+build3+nobinonly-0ubuntu0.8.04.1 |
| jaunty | released | 3.6.11+build3+nobinonly-0ubuntu0.9.04.1 |
| karmic | DNE | |
| lucid | DNE | |
| maverick | DNE | |
| natty | DNE | |
| upstream | needs-triage | Ubuntu source uses 3.6.x |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | DNE | |
| jaunty | released | 3.5.14+build3+nobinonly-0ubuntu0.9.04.1 |
| karmic | released | 3.6.11+build3+nobinonly-0ubuntu0.9.10.1 |
| lucid | DNE | |
| maverick | DNE | |
| natty | DNE | |
| upstream | needs-triage | Ubuntu source uses 3.6.x |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | released | 2.0.9+build1+nobinonly-0ubuntu0.10.10.1 |
| hardy | released | 2.0.9+build1+nobinonly-0ubuntu0.8.04.1 |
| jaunty | released | 2.0.9+build1+nobinonly-0ubuntu0.9.04.1 |
| karmic | released | 2.0.9+build1+nobinonly-0ubuntu0.9.10.1 |
| lucid | released | 2.0.9+build1+nobinonly-0ubuntu0.10.04.1 |
| maverick | released | 2.0.9+build1+nobinonly-0ubuntu0.10.10.1 |
| natty | released | 2.0.9+build1+nobinonly-0ubuntu0.10.10.1 |
| upstream | released | 2.0.9 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | released | 3.1.5+build1+nobinonly-0ubuntu0.10.10.1 |
| hardy | ignored | end of life |
| jaunty | ignored | end of life |
| karmic | ignored | end of life |
| lucid | released | 3.0.9+build1+nobinonly-0ubuntu0.10.04.1 |
| maverick | released | 3.1.5+build1+nobinonly-0ubuntu0.10.10.1 |
| natty | released | 3.1.5+build1+nobinonly-0ubuntu0.10.10.1 |
| upstream | released | 3.0.9, 3.1.5 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | DNE | |
| jaunty | released | 1.9.1.14+build4+nobinonly-0ubuntu0.9.04.1 |
| karmic | released | 1.9.1.14+build4+nobinonly-0ubuntu0.9.10.1 |
| lucid | DNE | |
| maverick | DNE | |
| natty | DNE | |
| upstream | released | 1.9.1.14 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | released | 1.9.2.11+build3+nobinonly-0ubuntu0.10.10.1 |
| hardy | released | 1.9.2.11+build3+nobinonly-0ubuntu0.8.04.1 |
| jaunty | released | 1.9.2.11+build3+nobinonly-0ubuntu0.9.04.1 |
| karmic | released | 1.9.2.11+build3+nobinonly-0ubuntu0.9.10.1 |
| lucid | released | 1.9.2.11+build3+nobinonly-0ubuntu0.10.04.1 |
| maverick | released | 1.9.2.11+build3+nobinonly-0ubuntu0.10.10.1 |
| natty | released | 1.9.2.11+build3+nobinonly-0ubuntu0.10.10.1 |
| upstream | released | 1.9.2.11 |
Показывать по
EPSS
6.9 Medium
CVSS2
Связанные уязвимости
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
A certain application-launch script in Mozilla Firefox before 3.5.14 a ...
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
EPSS
6.9 Medium
CVSS2