gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=644561 |
Configurations
Information
Published : 2010-11-05 17:00
Updated : 2010-11-07 21:00
NVD link : CVE-2010-4000
Mitre link : CVE-2010-4000
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
gnome
- gnome-shell