CVE-2010-3351

  • Last update: Apr 13, 2023

Description

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Software From Fixed in
nick_copeland / bristol 0.10.1 0.10.1.x
nick_copeland / bristol 0.10.10 0.10.10.x
nick_copeland / bristol 0.10.11 0.10.11.x
nick_copeland / bristol 0.10.12 0.10.12.x
nick_copeland / bristol 0.10.13 0.10.13.x
nick_copeland / bristol 0.10.2 0.10.2.x
nick_copeland / bristol 0.10.3 0.10.3.x
nick_copeland / bristol 0.10.4 0.10.4.x
nick_copeland / bristol 0.10.5 0.10.5.x
nick_copeland / bristol 0.10.6 0.10.6.x
nick_copeland / bristol 0.10.7 0.10.7.x
nick_copeland / bristol 0.10.8 0.10.8.x
nick_copeland / bristol 0.10.9 0.10.9.x
nick_copeland / bristol 0.20.1 0.20.1.x
nick_copeland / bristol 0.20.10 0.20.10.x
nick_copeland / bristol 0.20.2 0.20.2.x
nick_copeland / bristol 0.20.3 0.20.3.x
nick_copeland / bristol 0.20.4 0.20.4.x
nick_copeland / bristol 0.20.5 0.20.5.x
nick_copeland / bristol 0.20.6 0.20.6.x
nick_copeland / bristol 0.20.7 0.20.7.x
nick_copeland / bristol 0.20.8 0.20.8.x
nick_copeland / bristol 0.20.9 0.20.9.x
nick_copeland / bristol 0.30.1 0.30.1.x
nick_copeland / bristol 0.30.2 0.30.2.x
nick_copeland / bristol 0.30.3 0.30.3.x
nick_copeland / bristol 0.30.4 0.30.4.x
nick_copeland / bristol 0.30.5 0.30.5.x
nick_copeland / bristol 0.30.6 0.30.6.x
nick_copeland / bristol 0.30.7 0.30.7.x
nick_copeland / bristol 0.30.8 0.30.8.x
nick_copeland / bristol 0.30.9 0.30.9.x
nick_copeland / bristol 0.40.3 0.40.3.x
nick_copeland / bristol 0.40.4 0.40.4.x
nick_copeland / bristol 0.40.5 0.40.5.x
nick_copeland / bristol 0.40.6 0.40.6.x
nick_copeland / bristol 0.40.7 0.40.7.x
nick_copeland / bristol 0.40.8 0.40.8.x
nick_copeland / bristol 0.50.2 0.50.2.x
nick_copeland / bristol 0.50.3 0.50.3.x
nick_copeland / bristol 0.50.5 0.50.5.x
nick_copeland / bristol 0.50.6 0.50.6.x
nick_copeland / bristol 0.50.7 0.50.7.x
nick_copeland / bristol 0.50.8 0.50.8.x
nick_copeland / bristol 0.60.0 0.60.0.x
nick_copeland / bristol 0.60.1 0.60.1.x
nick_copeland / bristol 0.60.2 0.60.2.x
nick_copeland / bristol 0.60.3 0.60.3.x
nick_copeland / bristol 0.60.4 0.60.4.x
nick_copeland / bristol 0.60.5 0.60.5.x
nick_copeland / bristol 0.60.6 0.60.6.x
nick_copeland / bristol 0.60.7 0.60.7.x
nick_copeland / bristol 0.9.3 0.9.3.x
nick_copeland / bristol 0.9.4-1 0.9.4-1.x
nick_copeland / bristol 0.9.4-57 0.9.4-57.x
nick_copeland / bristol 0.9.5-13 0.9.5-13.x
nick_copeland / bristol 0.9.5-19 0.9.5-19.x
nick_copeland / bristol 0.9.5-37 0.9.5-37.x
nick_copeland / bristol 0.9.5-48 0.9.5-48.x
nick_copeland / bristol 0.9.5-60 0.9.5-60.x
nick_copeland / bristol 0.9.5-66 0.9.5-66.x
nick_copeland / bristol 0.9.5-89 0.9.5-89.x
nick_copeland / bristol 0.9.6-113 0.9.6-113.x
nick_copeland / bristol 0.9.6-121 0.9.6-121.x
nick_copeland / bristol 0.9.6-150 0.9.6-150.x
nick_copeland / bristol 0.9.6-169 0.9.6-169.x
nick_copeland / bristol 0.9.6-212 0.9.6-212.x

Details

    • Severity: Medium
  • CVE: CVE-2010-3351
  • Published: Oct 20, 2010
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C