CVE

Id
46743  
CVE No.
CVE-2010-4159  
Status
Candidate  
Description
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Phase
Assigned (20101104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
510507 46743 CVE-2010-4159 MLIST:[mono-patches] 20101012 [mono/mono] d3985be4: Search for dllimported shared libs in the base directory, not cwd.  View
510508 46743 CVE-2010-4159 URL:http://lists.ximian.com/pipermail/mono-patches/2010-October/177900.html  View
510509 46743 CVE-2010-4159 MLIST:[oss-security] 20101110 CVE request: mono loading shared libs from cwd  View
510510 46743 CVE-2010-4159 URL:http://marc.info/?l=oss-security&m=128939873515821&w=2  View
510511 46743 CVE-2010-4159 MLIST:[oss-security] 20101110 Re: CVE request: mono loading shared libs from cwd  View
510512 46743 CVE-2010-4159 URL:http://marc.info/?l=oss-security&m=128939912716499&w=2  View
510513 46743 CVE-2010-4159 MLIST:[oss-security] 20101110 Re: CVE request: mono loading shared libs from cwd  View
510514 46743 CVE-2010-4159 URL:http://marc.info/?l=oss-security&m=128941802415318&w=2  View
510515 46743 CVE-2010-4159 CONFIRM:http://www.mono-project.com/Vulnerabilities#Mono_Runtime_Insecure_Native_Library_Loading  View
510516 46743 CVE-2010-4159 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=641915  View
510517 46743 CVE-2010-4159 CONFIRM:https://github.com/mono/mono/commit/8e890a3bf80a4620e417814dc14886b1bbd17625  View
510518 46743 CVE-2010-4159 MANDRIVA:MDVSA-2010:240  View
510519 46743 CVE-2010-4159 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:240  View
510520 46743 CVE-2010-4159 BID:44810  View
510521 46743 CVE-2010-4159 URL:http://www.securityfocus.com/bid/44810  View
510522 46743 CVE-2010-4159 SECUNIA:42174  View
510523 46743 CVE-2010-4159 URL:http://secunia.com/advisories/42174  View
510524 46743 CVE-2010-4159 VUPEN:ADV-2010-3059  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30781 JVNDB-2011-001020 Linux kernel の blk_rq_map_user_iov 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の block/blk-map.c 内にある blk_rq_map_user_iov 関数には、zero-length I/O リクエストに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4163 46743 4.7 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001020.html  View