| Package | Affected versions | Patched versions |
|---|---|---|
| banshee | = 0.13.2= 1.0= 1.2= 1.2.1= 1.4= 1.4.2= 1.4.3= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.6.0= 1.6.1= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 1.7.6≤ 1.8.0 |
The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free