CVE-2010-3164: Medium severity sleipnir mobile vulnerability
Published Oct 25, 2010
·Updated
Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected Software
43 affected components
Fenrir Sleipnir=2.5.1
Fenrir Sleipnir=2.9.1
Fenrir Sleipnir=2.5.10
Fenrir Sleipnir=2.9.2
Fenrir Sleipnir=2.5.3
Fenrir Sleipnir=2.6.0
Fenrir Sleipnir=2.7.1-r2
Fenrir Sleipnir=2.5.6
Fenrir Sleipnir=2.5.14
Fenrir Sleipnir=2.8.5
Fenrir Sleipnir=2.5.9
Fenrir Sleipnir=2.5.16
Fenrir Sleipnir=2.5.8
Fenrir Sleipnir=2.9.3
Fenrir Sleipnir=2.8.4
Fenrir Sleipnir=2.5.13
Fenrir Sleipnir=2.9
Fenrir Sleipnir=2.5.4
Fenrir Sleipnir=2.5.11
Fenrir Sleipnir=2.7.2
Fenrir Sleipnir=2.8.2
Fenrir Sleipnir=2.5.15
Fenrir Sleipnir<=2.9.4
Fenrir Sleipnir=2.5.7
Fenrir Sleipnir=2.5.17
Fenrir Sleipnir=2.8
Fenrir Sleipnir=2.7.1
Fenrir Sleipnir=2.6.1
Fenrir Sleipnir=2.5.2
Fenrir Sleipnir=2.6.2
Fenrir Sleipnir=2.5.0
Fenrir Sleipnir=2.8.3
Fenrir Sleipnir=2.7.0
Fenrir Sleipnir=2.5.12
Fenrir Sleipnir=2.5.5
Fenrir Grani=3.5
Fenrir Grani=3.0
Fenrir Grani=3.2
Fenrir Grani=3.1
Fenrir Grani<=4.3
Fenrir Grani=4.1
Fenrir Grani=4.2
Fenrir Grani=4.0
Event History
Oct 25, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
Which installations are affected?
Fenrir Sleipnir 2.9.4 and earlier, and Fenrir Grani 4.3 and earlier, are affected.
2
What does an attacker need to exploit this issue?
The attacker needs local access and must place a Trojan horse executable in the application's current working directory. Exploitation does not require authentication.
3
What is the impact of successful exploitation?
A local attacker can gain privileges and compromise confidentiality, integrity, and availability.