CVE-2012-3381

Summary

CVE	CVE-2012-3381
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2012-08-17 00:55:03 UTC
Updated	2026-04-29 01:13:23 UTC
Description	sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Primary CVSS: v2.0 4.4 from [email protected]

AV:L/AC:M/Au:N/C:P/I:P/A:P

Problem Types: NVD-CWE-Other | n/a

Access Vector

Local

Access Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:L/AC:M/Au:N/C:P/I:P/A:P

Type	Vendor	Product	Version	Update	Edition	Language
Application	Standards Based Linux Instrumentation	Sblim-sfcb	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
oss-security - Re: CVE Request: sblim-sfcb: insecure LD_LIBRARY_PATH usage	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
Standards Based Linux Instrumentation / Bugs / #2499 insecure LD_LIBRARY_PATH usage	af854a3a-2127-422b-91ae-364da2661108	sourceforge.net
838160 – (CVE-2012-3381) CVE-2012-3381 sblim-sfcb: insecure LD_LIBRARY_PATH usage	af854a3a-2127-422b-91ae-364da2661108	bugzilla.redhat.com
Bug 770234 – VUL-1: sblim-sfcb: insecure LD_LIBRARY_PATH usage	af854a3a-2127-422b-91ae-364da2661108	bugzilla.novell.com
oss-security - CVE Request: sblim-sfcb: insecure LD_LIBRARY_PATH usage	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

901822 Common Base Linux Mariner (CBL-Mariner) Security Update for sblim-sfcb (7355)