CVE

Id
46582  
CVE No.
CVE-2010-3998  
Status
Candidate  
Description
The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH.  
Phase
Assigned (20101019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
508697 46582 CVE-2010-3998 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=644554  View
508698 46582 CVE-2010-3998 CONFIRM:http://download.banshee.fm/banshee/unstable/1.9.0/banshee-1-1.9.0.news  View
508699 46582 CVE-2010-3998 FEDORA:FEDORA-2010-16907  View
508700 46582 CVE-2010-3998 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050747.html  View
508701 46582 CVE-2010-3998 FEDORA:FEDORA-2010-16916  View
508702 46582 CVE-2010-3998 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050744.html  View
508703 46582 CVE-2010-3998 FEDORA:FEDORA-2010-17021  View
508704 46582 CVE-2010-3998 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050756.html  View
508705 46582 CVE-2010-3998 MANDRIVA:MDVSA-2011:034  View
508706 46582 CVE-2010-3998 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:034  View
508707 46582 CVE-2010-3998 BID:44752  View
508708 46582 CVE-2010-3998 URL:http://www.securityfocus.com/bid/44752  View
508709 46582 CVE-2010-3998 SECUNIA:42234  View
508710 46582 CVE-2010-3998 URL:http://secunia.com/advisories/42234  View
508711 46582 CVE-2010-3998 SECUNIA:42237  View
508712 46582 CVE-2010-3998 URL:http://secunia.com/advisories/42237  View
508713 46582 CVE-2010-3998 VUPEN:ADV-2010-2964  View

Related JVN