1. CVE-Search
  2. CVE-2010-3998
ID CVE-2010-3998
Summary The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH.
References
Vulnerable Configurations
  • cpe:2.3:a:banshee-project:banshee:0.13.2:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:0.13.2:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:1.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:1.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:banshee-project:banshee:*:*:*:*:*:*:*:*
    cpe:2.3:a:banshee-project:banshee:*:*:*:*:*:*:*:*
CVSS
Base: 6.9 (as of 15-09-2011 - 03:17)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 44752
confirm
fedora
  • FEDORA-2010-16907
  • FEDORA-2010-16916
  • FEDORA-2010-17021
mandriva MDVSA-2011:034
secunia
  • 42234
  • 42237
vupen ADV-2010-2964
Last major update 15-09-2011 - 03:17
Published 06-11-2010 - 00:00
Last modified 15-09-2011 - 03:17
Back to Top