PT-2010-4762
CVE-2010-3358
·
تاريخ النشر
2010-10-20
·
تاريخ التحديث
2010-10-22
الوصف من
CVSS 2.0
6.9
متوسطةالمقاييسAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
HenPlus JDBC SQL-Shell version 0.9.7
Description
The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to HenPlus JDBC SQL-Shell placing a zero-length directory name in the LD LIBRARY PATH.
Recommendations
For HenPlus JDBC SQL-Shell version 0.9.7, consider restricting access to the LD LIBRARY PATH environment variable to prevent malicious library loading. As a temporary workaround, avoid using the current working directory for library loading until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾