Local Privilege Escalation in GNOME Shell by Red Hat
CVE-2010-4000

Currently unrated

Key Information:

Vendor
Gnome
Status
Gnome-shell
Vendor
CVE Published:
6 November 2010

Summary

A vulnerability in GNOME Shell version 2.31.5 enables local users to escalate their privileges by placing a zero-length directory name into the LD_LIBRARY_PATH environment variable. This could facilitate the execution of a Trojan horse shared library located in the current working directory, potentially compromising system integrity and user data.

References

https://bugzilla.redhat.com/show_bug.cgi?id=644561
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.