CVE-2010-4000

gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2010-11-06

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Gnome-shell (Gnome)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=644561