The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2010-01-14T18:00:00Z
Updated: 2024-09-16T20:17:23.958Z
Reserved: 2009-12-14T00:00:00Z
Link: CVE-2010-0002
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2010-01-14T18:30:00.467
Modified: 2011-08-08T04:00:00.000
Link: CVE-2010-0002
Redhat
No data.