The (1) texmacs and (2) tm_mupad_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Advisories
Source ID Title
EUVD EUVD EUVD-2010-3392 The (1) texmacs and (2) tm_mupad_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-09-16T20:27:31.273Z

Reserved: 2010-09-15T00:00:00Z

Link: CVE-2010-3394

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-10-20T18:00:04.800

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3394

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses