NVD

Id
15444  
Name
CVE-2010-4159  
Description
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-17  
Modified Date
2010-12-09  
Seq
2010-4159  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87130 15444 CVE-2010-4159 [mono-patches] 20101012 [mono/mono] d3985be4: Search for dllimported shared libs in the base directory, not cwd.  View
87131 15444 CVE-2010-4159 [oss-security] 20101110 CVE request: mono loading shared libs from cwd  View
87132 15444 CVE-2010-4159 [oss-security] 20101110 Re: CVE request: mono loading shared libs from cwd  View
87133 15444 CVE-2010-4159 [oss-security] 20101110 Re: CVE request: mono loading shared libs from cwd  View
87134 15444 CVE-2010-4159 MDVSA-2010:240  View
87135 15444 CVE-2010-4159 http://www.mono-project.com/Vulnerabilities#Mono_Runtime_Insecure_Native_Library_Loading  View
87136 15444 CVE-2010-4159 44810  View
87137 15444 CVE-2010-4159 ADV-2010-3059  View
87138 15444 CVE-2010-4159 https://bugzilla.novell.com/show_bug.cgi?id=641915  View
87139 15444 CVE-2010-4159 https://github.com/mono/mono/commit/8e890a3bf80a4620e417814dc14886b1bbd17625  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37580 JVNDB-2010-003365 Mono の metadata/loader.c における権限を取得される脆弱性 Mono の metadata/loader.c には、検索パスに不備があるため、権限を取得される脆弱性が存在します。 CVE-2010-4159 46739 CVE-2010-4159 15444 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003365.html 2010-09-26 2012-03-27 View