Executive Summary

Informations
Name MDVSA-2010:193 First vendor Publication 2010-10-03
Vendor Mandriva Last vendor Modification 2010-10-03
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 6.9 Attack Range Local
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 3.4 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A vulnerability has been found in Qt Creator 2.0.0 and previous versions. The vulnerability occurs because of an insecure manipulation of a Unix environment variable by the qtcreator shell script. It manifests by causing Qt or Qt Creator to attempt to load certain library names from the current working directory (CVE-2010-3374).

The updated packages have been patched to correct this issue.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2010:193

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 14

OpenVAS Exploits

Date Description
2010-10-04 Name : Mandriva Update for qt-creator MDVSA-2010:193 (qt-creator)
File : nvt/gb_mandriva_MDVSA_2010_193.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
68366 Qt Creator LD_LIBRARY_PATH Zero-length Directory Name Path Subversion Local P...

Qt Creator contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when the program places a zero-length directory name in the LD_LIBRARY_PATH, allowing a local attacker to gain elevated privileges via a path subversion vulnerability.

Nessus® Vulnerability Scanner

Date Description
2014-12-15 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201412-09.nasl - Type : ACT_GATHER_INFO
2010-10-06 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2010-193.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:41:45
  • Multiple Updates