CVE-2010-3355

EUVD-2010-3353
Ember 0.5.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
erik_hjortsbergember
0.5.7
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ember
dapper
dne
hardy
dne
jaunty
dne
karmic
dne
lucid
ignored
maverick
ignored
natty
ignored
oneiric
dne
precise
dne
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne