Unrated severityNVD Advisory· Published Nov 5, 2010· Updated Apr 29, 2026
CVE-2010-3999
CVE-2010-3999
Description
gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Affected products
31cpe:2.3:a:gnucash:gnucash:*:*:*:*:*:*:*:*+ 30 more
- cpe:2.3:a:gnucash:gnucash:*:*:*:*:*:*:*:*range: <=2.3.15
- cpe:2.3:a:gnucash:gnucash:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:1.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.13:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:gnucash:gnucash:2.3.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- lists.fedoraproject.org/pipermail/package-announce/2010-November/050269.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-October/050164.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-October/050177.htmlnvd
- secunia.com/advisories/42048nvd
- secunia.com/advisories/42054nvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/bid/44563nvd
- www.vupen.com/english/advisories/2010/2848nvd
- www.vupen.com/english/advisories/2010/2898nvd
- www.vupen.com/english/advisories/2010/3060nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.