CVE

Id
45513  
CVE No.
CVE-2010-2929  
Status
Candidate  
Description
Untrusted search path vulnerability in hsolinkcontrol in hsolink 1.0.118 allows local users to gain privileges via a modified PATH environment variable, which is used during execution of the (1) route, (2) mv, and (3) cp programs, a different vulnerability than CVE-2010-1671.  
Phase
Assigned (20100802)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
495468 45513 CVE-2010-2929 MISC:http://ftp.de.debian.org/debian/pool/main/h/hsolink/hsolink_1.0.118.orig.tar.gz  View
495469 45513 CVE-2010-2929 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590670  View
495470 45513 CVE-2010-2929 OSVDB:66837  View
495471 45513 CVE-2010-2929 URL:http://osvdb.org/66837  View
495472 45513 CVE-2010-2929 XF:hsolinkcontrol-path-privilege-escalation(60877)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38457 JVNDB-2010-004242 AV Scripts AV Arcade における SQL インジェクションの脆弱性 AV Scripts AV Arcade には、index.php およびログインタスクに関連する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2010-2933 45513 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004242.html  View