Vulnerability in Simone Rota Slim Simple Login Manager
CVE-2010-2945
The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.
EPSS: 0.003 (22.0th percentile) — read the EPSS interpretation.
Affected products
- Simone_rota Slim_simple_login_manager — versions 1.2.5, 1.1.0, 1.2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)