CVE-2010-4159
First published: Wed Nov 17 2010(Updated: )
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mono Mono | =2.4.2.2 | |
| Mono Mono | =1.1.17.2 | |
| Mono Mono | =1.1.11 | |
| Mono Mono | =1.9 | |
| Mono Mono | =1.1.13.8 | |
| Mono Mono | =2.2 | |
| Mono Mono | =1.1.13.4 | |
| Mono Mono | <=2.6.7 | |
| Mono Mono | =1.1.13.5 | |
| Mono Mono | =1.2.2 | |
| Mono Mono | =1.1.13 | |
| Mono Mono | =1.0 | |
| Mono Mono | =2.6.3 | |
| Mono Mono | =1.1.8 | |
| Mono Mono | =1.1.8.3 | |
| Mono Mono | =1.1.3 | |
| Mono Mono | =1.2.5.2 | |
| Mono Mono | =2.0.1 | |
| Mono Mono | =1.2.1 | |
| Mono Mono | =1.0.2 | |
| Mono Mono | =1.0.1 | |
| Mono Mono | =2.4.2.3 | |
| Mono Mono | =2.6 | |
| Mono Mono | =1.1.5 | |
| Mono Mono | =1.2.4 | |
| Mono Mono | =1.1.10 | |
| Mono Mono | =1.1.6 | |
| Mono Mono | =1.1.17.1 | |
| Mono Mono | =1.1.15 | |
| Mono Mono | =1.2.5.1 | |
| Mono Mono | =1.1.18 | |
| Mono Mono | =1.1.1 | |
| Mono Mono | =1.2.5 | |
| Mono Mono | =1.1.8.1 | |
| Mono Mono | =2.4.2.1 | |
| Mono Mono | =1.2.3.1 | |
| Mono Mono | =1.0.5 | |
| Mono Mono | =1.1.10.1 | |
| Mono Mono | =1.1.14 | |
| Mono Mono | =2.4 | |
| Mono Mono | =1.1.13.8.1 | |
| Mono Mono | =1.0.6 | |
| Mono Mono | =2.4.3 | |
| Mono Mono | =2.6.4 | |
| Mono Mono | =1.1.13.7 | |
| Mono Mono | =1.2.6 | |
| Mono Mono | =1.1.13.2 | |
| Mono Mono | =1.0.4 | |
| Mono Mono | =1.9.1 | |
| Mono Mono | =1.1.16 | |
| Mono Mono | =1.1.17 | |
| Mono Mono | =1.1.16.1 | |
| Mono Mono | =1.1.12 | |
| Mono Mono | =1.1.2 | |
| Mono Mono | =1.2 | |
| Mono Mono | =1.1.9 | |
| Mono Mono | =1.1.7 | |
| Mono Mono | =1.1.4 | |
| Mono Mono | =2.0 | |
| Mono Mono | =1.1.13.6 | |
| Mono Mono | =1.1.9.1 | |
| Mono Mono | =2.4.2 | |
| Mono Mono | =1.2.2.1 | |
| Mono Mono | =1.2.3 | |
| Mono Mono | =1.1.12.1 | |
| Mono Mono | =1.1.9.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/44810
- http://marc.info/?l=oss-security&m=128941802415318&w=2
- http://marc.info/?l=oss-security&m=128939873515821&w=2
- https://bugzilla.novell.com/show_bug.cgi?id=641915
- http://secunia.com/advisories/42174
- http://marc.info/?l=oss-security&m=128939912716499&w=2
- http://lists.ximian.com/pipermail/mono-patches/2010-October/177900.html
- https://github.com/mono/mono/commit/8e890a3bf80a4620e417814dc14886b1bbd17625
- http://www.mono-project.com/Vulnerabilities#Mono_Runtime_Insecure_Native_Library_Loading
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:240
- http://www.vupen.com/english/advisories/2010/3059
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- vendor/mono
- canonical/mono mono
- version/mono mono/2.4.2.2
- version/mono mono/1.1.17.2
- version/mono mono/1.1.11
- version/mono mono/1.9
- version/mono mono/1.1.13.8
- version/mono mono/2.2
- version/mono mono/1.1.13.4
- version/mono mono/2.6.7
- version/mono mono/1.1.13.5
- version/mono mono/1.2.2
- version/mono mono/1.1.13
- version/mono mono/1.0
- version/mono mono/2.6.3
- version/mono mono/1.1.8
- version/mono mono/1.1.8.3
- version/mono mono/1.1.3
- version/mono mono/1.2.5.2
- version/mono mono/2.0.1
- version/mono mono/1.2.1
- version/mono mono/1.0.2
- version/mono mono/1.0.1
- version/mono mono/2.4.2.3
- version/mono mono/2.6
- version/mono mono/1.1.5
- version/mono mono/1.2.4
- version/mono mono/1.1.10
- version/mono mono/1.1.6
- version/mono mono/1.1.17.1
- version/mono mono/1.1.15
- version/mono mono/1.2.5.1
- version/mono mono/1.1.18
- version/mono mono/1.1.1
- version/mono mono/1.2.5
- version/mono mono/1.1.8.1
- version/mono mono/2.4.2.1
- version/mono mono/1.2.3.1
- version/mono mono/1.0.5
- version/mono mono/1.1.10.1
- version/mono mono/1.1.14
- version/mono mono/2.4
- version/mono mono/1.1.13.8.1
- version/mono mono/1.0.6
- version/mono mono/2.4.3
- version/mono mono/2.6.4
- version/mono mono/1.1.13.7
- version/mono mono/1.2.6
- version/mono mono/1.1.13.2
- version/mono mono/1.0.4
- version/mono mono/1.9.1
- version/mono mono/1.1.16
- version/mono mono/1.1.17
- version/mono mono/1.1.16.1
- version/mono mono/1.1.12
- version/mono mono/1.1.2
- version/mono mono/1.2
- version/mono mono/1.1.9
- version/mono mono/1.1.7
- version/mono mono/1.1.4
- version/mono mono/2.0
- version/mono mono/1.1.13.6
- version/mono mono/1.1.9.1
- version/mono mono/2.4.2
- version/mono mono/1.2.2.1
- version/mono mono/1.2.3
- version/mono mono/1.1.12.1
- version/mono mono/1.1.9.2