CVE-2010-4001

GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script

Affected Software

Name	Vendor	Start Version	End Version
Gromacs	Gromacs	*	4.5.1 (including)
Gromacs	Ubuntu	artful	*
Gromacs	Ubuntu	bionic	*
Gromacs	Ubuntu	cosmic	*
Gromacs	Ubuntu	dapper	*
Gromacs	Ubuntu	disco	*
Gromacs	Ubuntu	eoan	*
Gromacs	Ubuntu	groovy	*
Gromacs	Ubuntu	hardy	*
Gromacs	Ubuntu	hirsute	*
Gromacs	Ubuntu	impish	*
Gromacs	Ubuntu	karmic	*
Gromacs	Ubuntu	kinetic	*
Gromacs	Ubuntu	lucid	*
Gromacs	Ubuntu	lunar	*
Gromacs	Ubuntu	mantic	*
Gromacs	Ubuntu	maverick	*
Gromacs	Ubuntu	natty	*
Gromacs	Ubuntu	oneiric	*
Gromacs	Ubuntu	precise	*
Gromacs	Ubuntu	quantal	*
Gromacs	Ubuntu	raring	*
Gromacs	Ubuntu	saucy	*
Gromacs	Ubuntu	trusty	*
Gromacs	Ubuntu	utopic	*
Gromacs	Ubuntu	vivid	*
Gromacs	Ubuntu	wily	*
Gromacs	Ubuntu	xenial	*
Gromacs	Ubuntu	yakkety	*
Gromacs	Ubuntu	zesty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-4001
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References