CVE

Id
46580  
CVE No.
CVE-2010-3996  
Status
Candidate  
Description
festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Phase
Assigned (20101019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
508689 46580 CVE-2010-3996 MLIST:[opensuse-updates] 20101022 openSUSE-SU-2010:0756-1 (moderate): festival security update  View
508690 46580 CVE-2010-3996 URL:http://lists.opensuse.org/opensuse-updates/2010-10/msg00028.html  View
508691 46580 CVE-2010-3996 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=642507  View
508692 46580 CVE-2010-3996 SUSE:SUSE-SR:2010:020  View
508693 46580 CVE-2010-3996 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html  View
508694 46580 CVE-2010-3996 SUSE:SUSE-SR:2010:019  View
508695 46580 CVE-2010-3996 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html  View
508696 46580 CVE-2010-3996 BID:44395  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37511 JVNDB-2010-003296 GNOME Shell の gnome-shell における権限を取得される脆弱性 GNOME Shell の gnome-shell は、LD_LIBRARY_PATH 内でゼロ長のディレクトリ名を生成するため、権限を取得される脆弱性が存在します。 CVE-2010-4000 46580 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003296.html  View