CVE

Id
46585  
CVE No.
CVE-2010-4001  
Status
Candidate  
Description
** DISPUTED ** GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script.  
Phase
Assigned (20101019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
508734 46585 CVE-2010-4001 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=644596  View
508735 46585 CVE-2010-4001 FEDORA:FEDORA-2010-17248  View
508736 46585 CVE-2010-4001 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050763.html  View
508737 46585 CVE-2010-4001 FEDORA:FEDORA-2010-17256  View
508738 46585 CVE-2010-4001 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050783.html  View
508739 46585 CVE-2010-4001 VUPEN:ADV-2010-2971  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37512 JVNDB-2010-003297 GNOME Tomboy の tomboy スクリプトにおける権限を取得される脆弱性 GNOME Tomboy の tomboy および tomboy-panel スクリプトには、LD_LIBRARY_PATH 内でゼロ長のディレクトリ名を生成するため、権限を取得される脆弱性が存在します。 CVE-2010-4005 46585 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003297.html  View