CVE-2010-3389

The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Score
CVSS 2.0 6.9 Medium
Status
Modified - cve@mitre.org
Published
2010-10-20
Last modified
2024-08-07

Affected products

References

 
 
© AVABIS GmbH privacypolicy about