[Forgot Password]
Login  Register Subscribe

23631

 
 

125250

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-3350

Date: (C)2010-10-20   (M)2017-08-18 


bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS Score: 6.9Access Vector: LOCAL
Exploit Score: 3.4Access Complexity: MEDIUM
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECUNIA-42521
BID-44334
ADV-2010-3141
FEDORA-2010-18310
FEDORA-2010-18323
bareftp-ldlibpath-priv-escalation(64433)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598284
http://gitorious.org/bareftp/bareftp/blobs/15489abdb4c698cf832e95184bfe769a1ba70238/ChangeLog

CPE    1
cpe:/a:bareftp:bareftp:0.3.4
CWE    1
CWE-20
OVAL    2
oval:org.secpod.oval:def:100202
oval:org.secpod.oval:def:100017

© 2013 SecPod Technologies