6.9

CVE-2010-4159

Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mono ≫ Mono Version <= 2.6.7
Mono ≫ Mono Version 1.0
Mono ≫ Mono Version 1.0.1
Mono ≫ Mono Version 1.0.2
Mono ≫ Mono Version 1.0.4
Mono ≫ Mono Version 1.0.5
Mono ≫ Mono Version 1.0.6
Mono ≫ Mono Version 1.1.1
Mono ≫ Mono Version 1.1.2
Mono ≫ Mono Version 1.1.3
Mono ≫ Mono Version 1.1.4
Mono ≫ Mono Version 1.1.5
Mono ≫ Mono Version 1.1.6
Mono ≫ Mono Version 1.1.7
Mono ≫ Mono Version 1.1.8
Mono ≫ Mono Version 1.1.8.1
Mono ≫ Mono Version 1.1.8.3
Mono ≫ Mono Version 1.1.9
Mono ≫ Mono Version 1.1.9.1
Mono ≫ Mono Version 1.1.9.2
Mono ≫ Mono Version 1.1.10
Mono ≫ Mono Version 1.1.10.1
Mono ≫ Mono Version 1.1.11
Mono ≫ Mono Version 1.1.12
Mono ≫ Mono Version 1.1.12.1
Mono ≫ Mono Version 1.1.13
Mono ≫ Mono Version 1.1.13.2
Mono ≫ Mono Version 1.1.13.4
Mono ≫ Mono Version 1.1.13.5
Mono ≫ Mono Version 1.1.13.6
Mono ≫ Mono Version 1.1.13.7
Mono ≫ Mono Version 1.1.13.8
Mono ≫ Mono Version 1.1.13.8.1
Mono ≫ Mono Version 1.1.14
Mono ≫ Mono Version 1.1.15
Mono ≫ Mono Version 1.1.16
Mono ≫ Mono Version 1.1.16.1
Mono ≫ Mono Version 1.1.17
Mono ≫ Mono Version 1.1.17.1
Mono ≫ Mono Version 1.1.17.2
Mono ≫ Mono Version 1.1.18
Mono ≫ Mono Version 1.2
Mono ≫ Mono Version 1.2.1
Mono ≫ Mono Version 1.2.2
Mono ≫ Mono Version 1.2.2.1
Mono ≫ Mono Version 1.2.3
Mono ≫ Mono Version 1.2.3.1
Mono ≫ Mono Version 1.2.4
Mono ≫ Mono Version 1.2.5
Mono ≫ Mono Version 1.2.5.1
Mono ≫ Mono Version 1.2.5.2
Mono ≫ Mono Version 1.2.6
Mono ≫ Mono Version 1.9
Mono ≫ Mono Version 1.9.1
Mono ≫ Mono Version 2.0
Mono ≫ Mono Version 2.0.1
Mono ≫ Mono Version 2.2
Mono ≫ Mono Version 2.4
Mono ≫ Mono Version 2.4.2
Mono ≫ Mono Version 2.4.2.1
Mono ≫ Mono Version 2.4.2.2
Mono ≫ Mono Version 2.4.2.3
Mono ≫ Mono Version 2.4.3
Mono ≫ Mono Version 2.6
Mono ≫ Mono Version 2.6.3
Mono ≫ Mono Version 2.6.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.269
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.ximian.com/pipermail/mono-patches/2010-October/177900.html
Patch
http://marc.info/?l=oss-security&m=128939873515821&w=2
http://marc.info/?l=oss-security&m=128939912716499&w=2
http://marc.info/?l=oss-security&m=128941802415318&w=2
http://secunia.com/advisories/42174
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:240
http://www.mono-project.com/Vulnerabilities#Mono_Runtime_Insecure_Native_Library_Loading
http://www.securityfocus.com/bid/44810
http://www.vupen.com/english/advisories/2010/3059
https://bugzilla.novell.com/show_bug.cgi?id=641915
https://github.com/mono/mono/commit/8e890a3bf80a4620e417814dc14886b1bbd17625
Patch