6.9

CVE-2010-3351

Exploit
startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nick Copeland ≫ Bristol Version 0.60.5
Nick Copeland ≫ Bristol Version 0.9.3
Nick Copeland ≫ Bristol Version 0.9.4-1
Nick Copeland ≫ Bristol Version 0.9.4-57
Nick Copeland ≫ Bristol Version 0.9.5-13
Nick Copeland ≫ Bristol Version 0.9.5-19
Nick Copeland ≫ Bristol Version 0.9.5-37
Nick Copeland ≫ Bristol Version 0.9.5-48
Nick Copeland ≫ Bristol Version 0.9.5-60
Nick Copeland ≫ Bristol Version 0.9.5-66
Nick Copeland ≫ Bristol Version 0.9.5-89
Nick Copeland ≫ Bristol Version 0.9.6-113
Nick Copeland ≫ Bristol Version 0.9.6-121
Nick Copeland ≫ Bristol Version 0.9.6-150
Nick Copeland ≫ Bristol Version 0.9.6-169
Nick Copeland ≫ Bristol Version 0.9.6-212
Nick Copeland ≫ Bristol Version 0.10.1
Nick Copeland ≫ Bristol Version 0.10.2
Nick Copeland ≫ Bristol Version 0.10.3
Nick Copeland ≫ Bristol Version 0.10.4
Nick Copeland ≫ Bristol Version 0.10.5
Nick Copeland ≫ Bristol Version 0.10.6
Nick Copeland ≫ Bristol Version 0.10.7
Nick Copeland ≫ Bristol Version 0.10.8
Nick Copeland ≫ Bristol Version 0.10.9
Nick Copeland ≫ Bristol Version 0.10.10
Nick Copeland ≫ Bristol Version 0.10.11
Nick Copeland ≫ Bristol Version 0.10.12
Nick Copeland ≫ Bristol Version 0.10.13
Nick Copeland ≫ Bristol Version 0.20.1
Nick Copeland ≫ Bristol Version 0.20.2
Nick Copeland ≫ Bristol Version 0.20.3
Nick Copeland ≫ Bristol Version 0.20.4
Nick Copeland ≫ Bristol Version 0.20.5
Nick Copeland ≫ Bristol Version 0.20.6
Nick Copeland ≫ Bristol Version 0.20.7
Nick Copeland ≫ Bristol Version 0.20.8
Nick Copeland ≫ Bristol Version 0.20.9
Nick Copeland ≫ Bristol Version 0.20.10
Nick Copeland ≫ Bristol Version 0.30.1
Nick Copeland ≫ Bristol Version 0.30.2
Nick Copeland ≫ Bristol Version 0.30.3
Nick Copeland ≫ Bristol Version 0.30.4
Nick Copeland ≫ Bristol Version 0.30.5
Nick Copeland ≫ Bristol Version 0.30.6
Nick Copeland ≫ Bristol Version 0.30.7
Nick Copeland ≫ Bristol Version 0.30.8
Nick Copeland ≫ Bristol Version 0.30.9
Nick Copeland ≫ Bristol Version 0.40.3
Nick Copeland ≫ Bristol Version 0.40.4
Nick Copeland ≫ Bristol Version 0.40.5
Nick Copeland ≫ Bristol Version 0.40.6
Nick Copeland ≫ Bristol Version 0.40.7
Nick Copeland ≫ Bristol Version 0.40.8
Nick Copeland ≫ Bristol Version 0.50.2
Nick Copeland ≫ Bristol Version 0.50.3
Nick Copeland ≫ Bristol Version 0.50.5
Nick Copeland ≫ Bristol Version 0.50.6
Nick Copeland ≫ Bristol Version 0.50.7
Nick Copeland ≫ Bristol Version 0.50.8
Nick Copeland ≫ Bristol Version 0.60.0
Nick Copeland ≫ Bristol Version 0.60.1
Nick Copeland ≫ Bristol Version 0.60.2
Nick Copeland ≫ Bristol Version 0.60.3
Nick Copeland ≫ Bristol Version 0.60.4
Nick Copeland ≫ Bristol Version 0.60.6
Nick Copeland ≫ Bristol Version 0.60.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.324
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598285
Exploit
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050784.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050787.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050805.html
http://secunia.com/advisories/42272
http://www.securityfocus.com/bid/44335
http://www.vupen.com/english/advisories/2010/2972