startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Advisories
Source ID Title
EUVD EUVD EUVD-2010-3349 startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T03:03:18.957Z

Reserved: 2010-09-15T00:00:00

Link: CVE-2010-3351

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-10-20T18:00:03.643

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3351

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses