Tangerine Multiple Local Privilege Escalation Vulnerabilities
BID:44365
Info
Tangerine Multiple Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 44365 |
| Class: | Design Error |
| CVE: |
CVE-2010-3381 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 28 2010 12:00AM |
| Updated: | Sep 28 2010 12:00AM |
| Credit: | Raphael Geissert |
| Vulnerable: |
Canonical Tangerine 0.3.2 2 |
| Not Vulnerable: | |
Discussion
Tangerine Multiple Local Privilege Escalation Vulnerabilities
Tangerine is prone to multiple local privilege-escalation vulnerabilities.
Exploiting these issues allows local attackers to execute arbitrary code with the privileges of the user running the affected application.
Tangerine 0.3.2.2 is vulnerable; other versions may also be affected.
Tangerine is prone to multiple local privilege-escalation vulnerabilities.
Exploiting these issues allows local attackers to execute arbitrary code with the privileges of the user running the affected application.
Tangerine 0.3.2.2 is vulnerable; other versions may also be affected.
Exploit / POC
Tangerine Multiple Local Privilege Escalation Vulnerabilities
An attacker may exploit this issue using commonly available tools.
An attacker may exploit this issue using commonly available tools.
Solution / Fix
Tangerine Multiple Local Privilege Escalation Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Tangerine Multiple Local Privilege Escalation Vulnerabilities
References:
References:
- Tangerine Homepage (Canonical)
- tangerine: CVE-2010-3381: insecure library loading (#598302)