6.9
CVSSv2

CVE-2010-3384

Published: 20/10/2010 Updated: 21/10/2010
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerable Product Search on Vulmon Subscribe to Product

bernhard wymann torcs 1.3.1

Vendor Advisories

Debian Bug report logs - #598306 torcs: CVE-2010-3384: insecure library loading Package: torcs; Maintainer for torcs is Debian Games Team <pkg-games-devel@listsaliothdebianorg>; Source for torcs is src:torcs (PTS, buildd, popcon) Reported by: Raphael Geissert <geissert@debianorg> Date: Tue, 28 Sep 2010 04:25:18 U ...