Vulnerability Database

317,828

Total vulnerabilities in the database

CVE-2010-3393

magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

  • Published: Oct 20, 2010
  • Updated: Nov 9, 2025
  • CVE: CVE-2010-3393
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
ecmwf / magics++ 2.10.0 2.10.0.x