NetSight
IP …
medium6.9

CVE-2010-3351

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse share…

Impact

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected products

VendorProductAffected versions
Nick CopelandBristol
Versions 0.60.5, 0.9.3, 0.9.4-1, 0.9.4-57, 0.9.5-13, 0.9.5-19

References