startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| nick_copeland | bristol | 0.10.7 |
| nick_copeland | bristol | 0.60.0 |
| nick_copeland | bristol | 0.20.2 |
| nick_copeland | bristol | 0.40.4 |
| nick_copeland | bristol | 0.60.2 |
| nick_copeland | bristol | 0.40.8 |
| nick_copeland | bristol | 0.10.10 |
| nick_copeland | bristol | 0.40.7 |
| nick_copeland | bristol | 0.10.12 |
| nick_copeland | bristol | 0.30.4 |
| nick_copeland | bristol | 0.50.2 |
| nick_copeland | bristol | 0.40.6 |
| nick_copeland | bristol | 0.30.5 |
| nick_copeland | bristol | 0.50.8 |
| nick_copeland | bristol | 0.10.1 |
| nick_copeland | bristol | 0.10.4 |
| nick_copeland | bristol | 0.20.10 |
| nick_copeland | bristol | 0.30.3 |
| nick_copeland | bristol | 0.50.5 |
| nick_copeland | bristol | 0.50.3 |
| nick_copeland | bristol | 0.9.5-60 |
| nick_copeland | bristol | 0.20.8 |
| nick_copeland | bristol | 0.9.6-212 |
| nick_copeland | bristol | 0.9.3 |
| nick_copeland | bristol | 0.20.7 |
| nick_copeland | bristol | 0.50.6 |
| nick_copeland | bristol | 0.9.6-121 |
| nick_copeland | bristol | 0.60.7 |
| nick_copeland | bristol | 0.10.2 |
| nick_copeland | bristol | 0.9.6-113 |
| nick_copeland | bristol | 0.9.5-19 |
| nick_copeland | bristol | 0.10.6 |
| nick_copeland | bristol | 0.9.5-66 |
| nick_copeland | bristol | 0.30.7 |
| nick_copeland | bristol | 0.9.4-57 |
| nick_copeland | bristol | 0.40.5 |
| nick_copeland | bristol | 0.9.5-48 |
| nick_copeland | bristol | 0.20.4 |
| nick_copeland | bristol | 0.60.6 |
| nick_copeland | bristol | 0.30.9 |
| nick_copeland | bristol | 0.60.1 |
| nick_copeland | bristol | 0.30.6 |
| nick_copeland | bristol | 0.60.3 |
| nick_copeland | bristol | 0.9.6-169 |
| nick_copeland | bristol | 0.20.6 |
| nick_copeland | bristol | 0.30.2 |
| nick_copeland | bristol | 0.10.3 |
| nick_copeland | bristol | 0.20.5 |
| nick_copeland | bristol | 0.10.13 |
| nick_copeland | bristol | 0.9.5-13 |
| nick_copeland | bristol | 0.9.5-89 |
| nick_copeland | bristol | 0.20.9 |
| nick_copeland | bristol | 0.50.7 |
| nick_copeland | bristol | 0.9.4-1 |
| nick_copeland | bristol | 0.10.5 |
| nick_copeland | bristol | 0.10.8 |
| nick_copeland | bristol | 0.20.3 |
| nick_copeland | bristol | 0.9.6-150 |
| nick_copeland | bristol | 0.10.11 |
| nick_copeland | bristol | 0.30.8 |
| nick_copeland | bristol | 0.20.1 |
| nick_copeland | bristol | 0.60.4 |
| nick_copeland | bristol | 0.60.5 |
| nick_copeland | bristol | 0.40.3 |
| nick_copeland | bristol | 0.30.1 |
| nick_copeland | bristol | 0.10.9 |
| nick_copeland | bristol | 0.9.5-37 |