Lucene search
MitreCVE-2010-4005HistoryNov 06, 2010 - 12:00 a.m.
CVE-2010-4005
2010-11-0600:00:02
CWE-94
mitre
web.nvd.nist.gov
22
cve-2010-4005
nvd
tomboy
gnome
information security
privilege escalation
vulnerability
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.1
Confidence
Low
EPSS
0.001
Percentile
27.8%
The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: vector 1 exists because of an incorrect fix for CVE-2005-4790.2.
Affected configurations
Node
gnometomboyRange≤1.5.2
ORgnometomboyMatch1.0.1
ORgnometomboyMatch1.2.2
ORgnometomboyMatch1.4.2
ORgnometomboyMatch1.5.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gnome | tomboy | * | cpe:2.3:a:gnome:tomboy:*:*:*:*:*:*:*:* |
| gnome | tomboy | 1.0.1 | cpe:2.3:a:gnome:tomboy:1.0.1:*:*:*:*:*:*:* |
| gnome | tomboy | 1.2.2 | cpe:2.3:a:gnome:tomboy:1.2.2:*:*:*:*:*:*:* |
| gnome | tomboy | 1.4.2 | cpe:2.3:a:gnome:tomboy:1.4.2:*:*:*:*:*:*:* |
| gnome | tomboy | 1.5.1 | cpe:2.3:a:gnome:tomboy:1.5.1:*:*:*:*:*:*:* |
Related
debiancve
debiancve
CVE-2010-4005
2010-11-06 00:00:00
CVE-2005-4790
2005-12-31 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201401-28
2015-09-29 00:00:00
Mandriva Update for tomboy MDVSA-2011:035 (tomboy)
2011-02-28 00:00:00
Mandriva Update for tomboy MDVSA-2011:035 (tomboy)
2011-02-28 00:00:00
securityvulns
securityvulns
tomboy code execution
2011-02-26 00:00:00
[ MDVSA-2011:035 ] tomboy
2011-02-26 00:00:00
prion
prion
Directory traversal
2010-11-06 00:00:00
cvelist
cvelist
CVE-2010-4005
2010-11-05 22:00:00
CVE-2005-4790
2006-04-26 22:00:00
nessus
nessus
GLSA-201401-28 : Tomboy: Privilege escalation
2014-01-27 00:00:00
Mandriva Linux Security Advisory : tomboy (MDVSA-2011:035)
2011-02-23 00:00:00
Fedora 15 : tomboy-1.6.0-1.fc15 (2011-7997)
2011-06-16 00:00:00
nvd
nvd
CVE-2010-4005
2010-11-06 00:00:02
CVE-2005-4790
2005-12-31 05:00:00
gentoo
gentoo
Tomboy: Privilege escalation
2014-01-26 00:00:00
Blam: User-assisted execution of arbitrary code
2008-01-27 00:00:00
Tomboy: User-assisted execution of arbitrary code
2007-11-08 00:00:00
ubuntucve
ubuntucve
CVE-2010-4005
2010-11-06 00:00:00
CVE-2005-4790
2005-12-31 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: tomboy-1.6.0-1.fc15
2011-06-15 18:38:46
[SECURITY] Fedora 14 Update: tomboy-1.6.0-1.fc14
2011-06-15 18:36:55
[SECURITY] Fedora 7 Update: blam-1.8.3-10.fc7
2007-11-29 01:45:27
cve
cve
CVE-2005-4790
2006-04-26 22:00:00
redhatcve
redhatcve
CVE-2005-4790
2019-10-04 20:52:18
ubuntu
ubuntu
Tomboy vulnerability
2008-01-07 00:00:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.1
Confidence
Low
EPSS
0.001
Percentile
27.8%
Related for CVE-2010-4005