CVE-2010-3383 — MEDIUM (6.9)

Vulnerability Description

The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS Score

6.9

MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Teamspeak	Teamspeak	2.0.32

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598304ExploitPatch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598305ExploitPatch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598304ExploitPatch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598305ExploitPatch

FAQ

What is CVE-2010-3383?

CVE-2010-3383 is a vulnerability with a CVSS score of 6.9 (MEDIUM). The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared ...

How severe is CVE-2010-3383?

CVE-2010-3383 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-3383?

Check the references section above for vendor advisories and patch information. Affected products include: Teamspeak Teamspeak.