gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2010-11-05T16:28:00
Updated: 2024-08-07T03:26:12.342Z
Reserved: 2010-10-19T00:00:00
Link: CVE-2010-3999

No data.

Status : Modified
Published: 2010-11-05T17:00:03.077
Modified: 2024-11-21T01:20:02.687
Link: CVE-2010-3999

No data.