QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-3999

Back to search

CVE-2010-3999

Published: Nov 5, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

VendorProductVersions

n/a

n/a

affected
n/a

References

FEDORA-2010-16762
vendor-advisory
x_refsource_FEDORA
ADV-2010-2898
vdb-entry
x_refsource_VUPEN
42054
third-party-advisory
x_refsource_SECUNIA
ADV-2010-3060
vdb-entry
x_refsource_VUPEN
FEDORA-2010-16622
vendor-advisory
x_refsource_FEDORA
MDVSA-2010:241
vendor-advisory
x_refsource_MANDRIVA
ADV-2010-2848
vdb-entry
x_refsource_VUPEN
42048
third-party-advisory
x_refsource_SECUNIA
FEDORA-2010-16605
vendor-advisory
x_refsource_FEDORA
44563
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now