The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-11-05T22:00:00
Updated: 2024-08-07T03:26:12.387Z
Reserved: 2010-10-19T00:00:00
Link: CVE-2010-3998
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-11-06T00:00:02.593
Modified: 2024-11-21T01:20:02.533
Link: CVE-2010-3998
Redhat
No data.