CVEvulnerability
CVE-2014-3391
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by placing a Trojan horse library file in external memory, leading to library use after device reload because of an incorrect LD_LIBRARY_PATH value, aka Bug ID CSCtq52661.
Affected configurations
• cisco adaptive security appliance software 8.7.8
• cisco adaptive security appliance software 8.2.0.45
• cisco adaptive security appliance software 8.2.1
• cisco adaptive security appliance software 8.2.1.1
• cisco adaptive security appliance software 8.2.2
• cisco adaptive security appliance software 8.2.2.10
• cisco adaptive security appliance software 8.2.2.12
• cisco adaptive security appliance software 8.2.2.16
• cisco adaptive security appliance software 8.2.2.17
• cisco adaptive security appliance software 8.2.3
• cisco adaptive security appliance software 8.2.4
• cisco adaptive security appliance software 8.2.4.1
• cisco adaptive security appliance software 8.2.4.4
• cisco adaptive security appliance software 8.2.5
• cisco adaptive security appliance software 8.2.5.13
• cisco adaptive security appliance software 8.2.5.22
• cisco adaptive security appliance software 8.2.5.26
• cisco adaptive security appliance software 8.2.5.33
• cisco adaptive security appliance software 8.2.5.40
• cisco adaptive security appliance software 8.2.5.41
• cisco adaptive security appliance software 8.2.5.46
• cisco adaptive security appliance software 8.2.5.48
• cisco adaptive security appliance software 8.2.5.50
• cisco adaptive security appliance software 8.3.1
• cisco adaptive security appliance software 8.3.1.1
• cisco adaptive security appliance software 8.3.1.4
• cisco adaptive security appliance software 8.3.1.6
• cisco adaptive security appliance software 8.3.2
• cisco adaptive security appliance software 8.3.2.4
• cisco adaptive security appliance software 8.3.2.13
• cisco adaptive security appliance software 8.3.2.23
• cisco adaptive security appliance software 8.3.2.25
• cisco adaptive security appliance software 8.3.2.31
• cisco adaptive security appliance software 8.3.2.33
• cisco adaptive security appliance software 8.3.2.34
• cisco adaptive security appliance software 8.3.2.37
• cisco adaptive security appliance software 8.3.2.39
• cisco adaptive security appliance software 8.3.2.40
• cisco adaptive security appliance software 8.3.2.41
• cisco adaptive security appliance software 8.4.1
• cisco adaptive security appliance software 8.4.1.3
• cisco adaptive security appliance software 8.4.1.11
• cisco adaptive security appliance software 8.4.2
• cisco adaptive security appliance software 8.4.2.1
• cisco adaptive security appliance software 8.4.2.8
• cisco adaptive security appliance software 8.4.3
• cisco adaptive security appliance software 8.4.3.8
• cisco adaptive security appliance software 8.4.3.9
• cisco adaptive security appliance software 8.4.4
• cisco adaptive security appliance software 8.4.4.1
• cisco adaptive security appliance software 8.4.4.3
• cisco adaptive security appliance software 8.4.4.5
• cisco adaptive security appliance software 8.4.4.9
• cisco adaptive security appliance software 8.4.5
• cisco adaptive security appliance software 8.4.5.6
• cisco adaptive security appliance software 8.4.6
• cisco adaptive security appliance software 8.4.7
• cisco adaptive security appliance software 8.4.7.3
• cisco adaptive security appliance software 8.4.7.15
• cisco adaptive security appliance software 8.4.7.22
… and 6 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness