NetSight
IP …
medium4.6

CVE-2005-0627

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment vari…

Impact

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.

Affected products

VendorProductAffected versions
TrolltechQt
Versions 3.0, 3.0.3, 3.0.5, 3.1, 3.1.1, 3.1.2

References