CVE-2010-3350 - bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory

Back Back to CVE browser

MEDIUM

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory

Published Oct 20, 2010

6.9

MEDIUM

CVSS 2.0

EPSS 0.32%

Description

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (9)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598284
x_refsource_CONFIRMPatch
http://gitorious.org/bareftp/bareftp/blobs/15489abdb4c698cf832e95184bfe769a1ba70238/ChangeLog
x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051921.html
vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051936.html
vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/42521
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/44334
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/3141
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-3348
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64433
vdb-entryx_refsource_XF

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598284		x_refsource_CONFIRMPatch
http://gitorious.org/bareftp/bareftp/blobs/15489abdb4c698cf832e95184bfe769a1ba70238/ChangeLog		x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051921.html		vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051936.html		vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/42521		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/44334		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2010/3141		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-3348		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64433		vdb-entryx_refsource_XF