CVE-2005-0627 Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute...
MediumCVSS 4.6
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trolltech qt | = 3.0 | No fix listed |
| trolltech qt | = 3.0.3 | No fix listed |
| trolltech qt | = 3.0.5 | No fix listed |
| trolltech qt | = 3.1 | No fix listed |
| trolltech qt | = 3.1.1 | No fix listed |
| trolltech qt | = 3.1.2 | No fix listed |
| trolltech qt | = 3.2.1 | No fix listed |
| trolltech qt | = 3.2.3 | No fix listed |
| trolltech qt | = 3.3.0 | No fix listed |
| trolltech qt | = 3.3.1 | No fix listed |
| trolltech qt | = 3.3.2 | No fix listed |
| trolltech qt | = 3.3.3 | No fix listed |
References
- bugs.gentoo.org patch
- GLSA-200503-01 patch vendor-advisory
- 12695 patch vdb-entry