CVE-2010-3369: Medium severity Debian Mono-debugger vulnerability
The (1) mdb and (2) mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3369?
CVE-2010-3369 is considered to have a moderate severity level due to the privilege escalation risk it poses to local users.
How do I fix CVE-2010-3369?
To fix CVE-2010-3369, upgrade to the mono-debugger version 2.8.1 or later.
What versions of software are affected by CVE-2010-3369?
CVE-2010-3369 affects mono-debugger versions prior to 2.8.1, including 2.4.3 and various 2.6.x versions.
What is the impact of CVE-2010-3369?
The impact of CVE-2010-3369 allows local users to gain elevated privileges via a Trojan horse shared library.
Who is primarily affected by CVE-2010-3369?
Local users of systems running vulnerable versions of the mono-debugger are primarily affected by CVE-2010-3369.