dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
References
Link | Resource |
---|---|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598287 |
Configurations
Information
Published : 2010-10-20 11:00
Updated : 2010-11-02 21:00
NVD link : CVE-2010-3354
Mitre link : CVE-2010-3354
JSON object : View
CWE
Products Affected
dropbox
- dropbox