CVE-2010-3999

gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected Software

Name	Vendor	Start Version	End Version
Gnucash	Gnucash	*	2.3.15 (including)
Gnucash	Gnucash	1.8.3 (including)	1.8.3 (including)
Gnucash	Gnucash	1.8.4 (including)	1.8.4 (including)
Gnucash	Gnucash	1.8.5 (including)	1.8.5 (including)
Gnucash	Gnucash	2.0.0 (including)	2.0.0 (including)
Gnucash	Gnucash	2.0.1 (including)	2.0.1 (including)
Gnucash	Gnucash	2.2.0 (including)	2.2.0 (including)
Gnucash	Gnucash	2.2.1 (including)	2.2.1 (including)
Gnucash	Gnucash	2.2.2 (including)	2.2.2 (including)
Gnucash	Gnucash	2.2.3 (including)	2.2.3 (including)
Gnucash	Gnucash	2.2.4 (including)	2.2.4 (including)
Gnucash	Gnucash	2.2.5 (including)	2.2.5 (including)
Gnucash	Gnucash	2.2.6 (including)	2.2.6 (including)
Gnucash	Gnucash	2.2.7 (including)	2.2.7 (including)
Gnucash	Gnucash	2.2.8 (including)	2.2.8 (including)
Gnucash	Gnucash	2.2.9 (including)	2.2.9 (including)
Gnucash	Gnucash	2.3.0 (including)	2.3.0 (including)
Gnucash	Gnucash	2.3.1 (including)	2.3.1 (including)
Gnucash	Gnucash	2.3.2 (including)	2.3.2 (including)
Gnucash	Gnucash	2.3.3 (including)	2.3.3 (including)
Gnucash	Gnucash	2.3.4 (including)	2.3.4 (including)
Gnucash	Gnucash	2.3.5 (including)	2.3.5 (including)
Gnucash	Gnucash	2.3.6 (including)	2.3.6 (including)
Gnucash	Gnucash	2.3.7 (including)	2.3.7 (including)
Gnucash	Gnucash	2.3.8 (including)	2.3.8 (including)
Gnucash	Gnucash	2.3.9 (including)	2.3.9 (including)
Gnucash	Gnucash	2.3.10 (including)	2.3.10 (including)
Gnucash	Gnucash	2.3.11 (including)	2.3.11 (including)
Gnucash	Gnucash	2.3.12 (including)	2.3.12 (including)
Gnucash	Gnucash	2.3.13 (including)	2.3.13 (including)
Gnucash	Gnucash	2.3.14 (including)	2.3.14 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-3999
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References