CVE-2010-2945

Publication date 30 August 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.

Status

Package Ubuntu Release Status
slim 13.10 saucy
Not affected
13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid Ignored end of life
9.10 karmic Not in release
9.04 jaunty Ignored end of life
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Not in release

References

Other references

Access our resources on patching vulnerabilities