NVD

Id
14376  
Name
CVE-2010-2945  
Description
The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-08-30  
Modified Date
2010-08-31  
Seq
2010-2945  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79547 14376 CVE-2010-2945 http://svn.berlios.de/viewvc/slim?view=revision&revision=171  View
79548 14376 CVE-2010-2945 [oss-security] 20100819 CVE Request: SLiM insecure PATH assignment  View
79549 14376 CVE-2010-2945 [oss-security] 20100820 Re: CVE Request: SLiM insecure PATH assignment  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39826 JVNDB-2010-005611 SLiM における権限を取得される脆弱性 SLiM のデフォルトコンフィグレーションは、default_path オプションの先頭に ./ (ドットスラッシュ) を配置する、slim.conf および cfg.cpp に関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2010-2945 45525 CVE-2010-2945 14376 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005611.html 2010-08-30 2012-12-20 View