What’s Vulnerable › Vulnerabilities

CVE-2010-3351

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-10-20 · updated 2026-06-16

Description

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected products

• Nick Copeland Bristol: 0.60.5, 0.9.3, 0.9.4-1, 0.9.4-57, 0.9.5-13, 0.9.5-19 (+61)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598285
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050784.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050787.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050805.html
• http://secunia.com/advisories/42272
• http://www.securityfocus.com/bid/44335
• http://www.vupen.com/english/advisories/2010/2972
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598285
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050784.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050787.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050805.html
• http://secunia.com/advisories/42272

Get alerted when CVE-2010-3351 or the next vulnerability affects your stack