CVE-2010-2945 The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the cur...
MediumCVSS 6.9
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simone rota slim simple login manager | <= 1.3.1 | No fix listed |
| simone rota slim simple login manager | = 1.0.0 | No fix listed |
| simone rota slim simple login manager | = 1.1.0 | No fix listed |
| simone rota slim simple login manager | = 1.2.0 | No fix listed |
| simone rota slim simple login manager | = 1.2.1 | No fix listed |
| simone rota slim simple login manager | = 1.2.2 | No fix listed |
| simone rota slim simple login manager | = 1.2.3 | No fix listed |
| simone rota slim simple login manager | = 1.2.4 | No fix listed |
| simone rota slim simple login manager | = 1.2.5 | No fix listed |
| simone rota slim simple login manager | = 1.2.6 | No fix listed |
| simone rota slim simple login manager | = 1.3.0 | No fix listed |
| debian/slim(Debian:12) | < 1.3.1-7 | 1.3.1-7 |
| debian/slim(Debian:13) | < 1.3.1-7 | 1.3.1-7 |
| debian/slim(Debian:14) | < 1.3.1-7 | 1.3.1-7 |
References
- 41005 third-party-advisory vendor-advisory
- svn.berlios.de
- [oss-security] 20100819 CVE Request: SLiM insecure PATH assignment mailing-list
- [oss-security] 20100820 Re: CVE Request: SLiM insecure PATH assignment mailing-list
- Debian Security Tracker CVE-2010-2945 vendor-advisory
- bugs.debian.org issue-tracking