CVE Vulnerabilities

CVE-2010-2945

Published: Aug 30, 2010 | Modified: Aug 31, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
LOW

The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.

Affected Software

Name Vendor Start Version End Version
Slim_simple_login_manager Simone_rota * 1.3.1 (including)
Slim_simple_login_manager Simone_rota 1.0.0 (including) 1.0.0 (including)
Slim_simple_login_manager Simone_rota 1.1.0 (including) 1.1.0 (including)
Slim_simple_login_manager Simone_rota 1.2.0 (including) 1.2.0 (including)
Slim_simple_login_manager Simone_rota 1.2.1 (including) 1.2.1 (including)
Slim_simple_login_manager Simone_rota 1.2.2 (including) 1.2.2 (including)
Slim_simple_login_manager Simone_rota 1.2.3 (including) 1.2.3 (including)
Slim_simple_login_manager Simone_rota 1.2.4 (including) 1.2.4 (including)
Slim_simple_login_manager Simone_rota 1.2.5 (including) 1.2.5 (including)
Slim_simple_login_manager Simone_rota 1.2.6 (including) 1.2.6 (including)
Slim_simple_login_manager Simone_rota 1.3.0 (including) 1.3.0 (including)
Slim Ubuntu hardy *
Slim Ubuntu jaunty *
Slim Ubuntu lucid *
Slim Ubuntu upstream *

References