CVE-2010-3387

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2010-3387
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2010-3387.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2010-3387
Downstream
Published
2010-10-20T18:00:04Z
Modified
2026-04-10T03:41:24.536486Z
Summary
[none]
Details

vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: a third party disputes this issue because the script erroneously uses a semicolon in a context where a colon was intended

Database specific 
{
    "isDisputed": true
}
References

Affected packages