NVD

Id
14765  
Name
CVE-2010-3369  
Description
The (1) mdb and (2) mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-20  
Modified Date
2010-12-14  
Seq
2010-3369  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81763 14765 CVE-2010-3369 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598299  View
81764 14765 CVE-2010-3369 http://www.mono-project.com/Vulnerabilities#mono-debugger_Insecure_Use_of_LD_LIBRARY_PATH  View
81765 14765 CVE-2010-3369 https://bugzilla.novell.com/show_bug.cgi?id=647353  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37300 JVNDB-2010-003085 mono-debugger の mdb スクリプトおよび mdb-symbolreader スクリプトにおける権限を取得される脆弱性 mono-debuggerの mdb スクリプトおよび mdb-symbolreader スクリプトは、LD_LIBRARY_PATH 内にゼロの長さのディレクトリ名を配置するため、権限を取得される脆弱性が存在します。 CVE-2010-3369 45949 CVE-2010-3369 14765 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003085.html 2010-10-20 2012-03-27 View