CVEvulnerability
CVE-2012-3381
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Description
sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Affected configurations
• standards based linux instrumentation sblim-sfcb
References
- http://sourceforge.net/tracker/index.php?func=detail&aid=3541554&group_id=128809&atid=712784 sourceforge.net
- http://www.openwall.com/lists/oss-security/2012/07/06/7 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/07/06/8 www.openwall.com
- https://bugzilla.novell.com/show_bug.cgi?id=770234 bugzilla.novell.com
- https://bugzilla.redhat.com/show_bug.cgi?id=838160 bugzilla.redhat.com
- http://sourceforge.net/tracker/index.php?func=detail&aid=3541554&group_id=128809&atid=712784 sourceforge.net
- http://www.openwall.com/lists/oss-security/2012/07/06/7 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/07/06/8 www.openwall.com
- https://bugzilla.novell.com/show_bug.cgi?id=770234 bugzilla.novell.com
- https://bugzilla.redhat.com/show_bug.cgi?id=838160 bugzilla.redhat.com