CVE-2010-3351

Severity

69%

Complexity

34%

Confidentiality

165%

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS 2.0 Base Score 6.9. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Bristol Audio Synthesis (bristol)

First reported 14 years ago

2010-10-20 18:00:00

Last updated 13 years ago

2011-09-15 03:16:00

Affected Software

Bristol Audio Synthesis (bristol) 0.60.5

0.60.5

Bristol Audio Synthesis (bristol) 0.9.3

0.9.3

Bristol Audio Synthesis (bristol) 0.9.4-1

0.9.4-1

Bristol Audio Synthesis (bristol) 0.9.4-57

0.9.4-57

Bristol Audio Synthesis (bristol) 0.9.5-13

0.9.5-13

Bristol Audio Synthesis (bristol) 0.9.5-19

0.9.5-19

Bristol Audio Synthesis (bristol) 0.9.5-37

0.9.5-37

Bristol Audio Synthesis (bristol) 0.9.5-48

0.9.5-48

Bristol Audio Synthesis (bristol) 0.9.5-60

0.9.5-60

Bristol Audio Synthesis (bristol) 0.9.5-66

0.9.5-66

Bristol Audio Synthesis (bristol) 0.9.5-89

0.9.5-89

Bristol Audio Synthesis (bristol) 0.9.6-113

0.9.6-113

Bristol Audio Synthesis (bristol) 0.9.6-121

0.9.6-121

Bristol Audio Synthesis (bristol) 0.9.6-150

0.9.6-150

Bristol Audio Synthesis (bristol) 0.9.6-169

0.9.6-169

Bristol Audio Synthesis (bristol) 0.9.6-212

0.9.6-212

Bristol Audio Synthesis (bristol) 0.10.1

0.10.1

Bristol Audio Synthesis (bristol) 0.10.2

0.10.2

Bristol Audio Synthesis (bristol) 0.10.3

0.10.3

Bristol Audio Synthesis (bristol) 0.10.4

0.10.4

Bristol Audio Synthesis (bristol) 0.10.5

0.10.5

Bristol Audio Synthesis (bristol) 0.10.6

0.10.6

Bristol Audio Synthesis (bristol) 0.10.7

0.10.7

Bristol Audio Synthesis (bristol) 0.10.8

0.10.8

Bristol Audio Synthesis (bristol) 0.10.9

0.10.9

Bristol Audio Synthesis (bristol) 0.10.10

0.10.10

Bristol Audio Synthesis (bristol) 0.10.11

0.10.11

Bristol Audio Synthesis (bristol) 0.10.12

0.10.12

Bristol Audio Synthesis (bristol) 0.10.13

0.10.13

Bristol Audio Synthesis (bristol) 0.20.1

0.20.1

Bristol Audio Synthesis (bristol) 0.20.2

0.20.2

Bristol Audio Synthesis (bristol) 0.20.3

0.20.3

Bristol Audio Synthesis (bristol) 0.20.4

0.20.4

Bristol Audio Synthesis (bristol) 0.20.5

0.20.5

Bristol Audio Synthesis (bristol) 0.20.6

0.20.6

Bristol Audio Synthesis (bristol) 0.20.7

0.20.7

Bristol Audio Synthesis (bristol) 0.20.8

0.20.8

Bristol Audio Synthesis (bristol) 0.20.9

0.20.9

Bristol Audio Synthesis (bristol) 0.20.10

0.20.10

Bristol Audio Synthesis (bristol) 0.30.1

0.30.1

Bristol Audio Synthesis (bristol) 0.30.2

0.30.2

Bristol Audio Synthesis (bristol) 0.30.3

0.30.3

Bristol Audio Synthesis (bristol) 0.30.4

0.30.4

Bristol Audio Synthesis (bristol) 0.30.5

0.30.5

Bristol Audio Synthesis (bristol) 0.30.6

0.30.6

Bristol Audio Synthesis (bristol) 0.30.7

0.30.7

Bristol Audio Synthesis (bristol) 0.30.8

0.30.8

Bristol Audio Synthesis (bristol) 0.30.9

0.30.9

Bristol Audio Synthesis (bristol) 0.40.3

0.40.3

Bristol Audio Synthesis (bristol) 0.40.4

0.40.4

Bristol Audio Synthesis (bristol) 0.40.5

0.40.5

Bristol Audio Synthesis (bristol) 0.40.6

0.40.6

Bristol Audio Synthesis (bristol) 0.40.7

0.40.7

Bristol Audio Synthesis (bristol) 0.40.8

0.40.8

Bristol Audio Synthesis (bristol) 0.50.2

0.50.2

Bristol Audio Synthesis (bristol) 0.50.3

0.50.3

Bristol Audio Synthesis (bristol) 0.50.5

0.50.5

Bristol Audio Synthesis (bristol) 0.50.6

0.50.6

Bristol Audio Synthesis (bristol) 0.50.7

0.50.7

Bristol Audio Synthesis (bristol) 0.50.8

0.50.8

Bristol Audio Synthesis (bristol) 0.60.0

0.60.0

Bristol Audio Synthesis (bristol) 0.60.1

0.60.1

Bristol Audio Synthesis (bristol) 0.60.2

0.60.2

Bristol Audio Synthesis (bristol) 0.60.3

0.60.3

Bristol Audio Synthesis (bristol) 0.60.4

0.60.4

Bristol Audio Synthesis (bristol) 0.60.6

0.60.6

Bristol Audio Synthesis (bristol) 0.60.7

0.60.7

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598285

Exploit

FEDORA-2010-16714

FEDORA-2010-16676

FEDORA-2010-16687

42272

44335

ADV-2010-2972

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.