NVD

Id
15324  
Name
CVE-2010-3998  
Description
The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-05  
Modified Date
2011-09-14  
Seq
2010-3998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86277 15324 CVE-2010-3998 http://download.banshee.fm/banshee/unstable/1.9.0/banshee-1-1.9.0.news  View
86278 15324 CVE-2010-3998 FEDORA-2010-16916  View
86279 15324 CVE-2010-3998 FEDORA-2010-16907  View
86280 15324 CVE-2010-3998 FEDORA-2010-17021  View
86281 15324 CVE-2010-3998 MDVSA-2011:034  View
86282 15324 CVE-2010-3998 44752  View
86283 15324 CVE-2010-3998 ADV-2010-2964  View
86284 15324 CVE-2010-3998 https://bugzilla.redhat.com/show_bug.cgi?id=644554  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37509 JVNDB-2010-003294 Banshee の banshee-1 スクリプトにおける権限を取得される脆弱性 Banshee の banshee-1 および muinshee スクリプトには、LD_LIBRARY_PATH にゼロ長のディレクトリ名を配置するため、権限を取得される脆弱性が存在します。 CVE-2010-3998 46578 CVE-2010-3998 15324 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003294.html 2010-11-05 2012-03-27 View