SLiM CVE-2010-2945 Local Privilege Escalation Vulnerability

Bugtraq ID:	71722
Class:	Design Error
CVE:	CVE-2010-2945
Remote:	No
Local:	Yes
Published:	Aug 20 2010 12:00AM
Updated:	Aug 20 2010 12:00AM
Credit:	Niels Heinen
Vulnerable:	SLiM SLiM 1.3 SLiM SLiM 1.3.1 Gentoo Linux
Not Vulnerable:	SLiM SLiM 1.3.2

SLiM CVE-2010-2945 Local Privilege Escalation Vulnerability

SLiM is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to execute arbitrary code with elevated-privileges.

versions prior to SLiM 1.3.2 are vulnerable.

SLiM CVE-2010-2945 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SLiM CVE-2010-2945 Local Privilege Escalation Vulnerability

References:

• CVE Request: SLiM insecure PATH assignment (Openwall)
  
• CVE-2010-2945 (Debian)
  
• SLiM Homepage (SLiM)