Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 386319 (CVE-2010-3996) - <app-accessibility/festival-2.1: library path loading vulnerability (CVE-2010-3996)
Summary: <app-accessibility/festival-2.1: library path loading vulnerability (CVE-2010...
Alias: CVE-2010-3996
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: B2 [glsa]
Depends on:
Reported: 2011-10-08 14:15 UTC by GLSAMaker/CVETool Bot
Modified: 2013-12-09 06:24 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-10-08 14:15:41 UTC
CVE-2010-3996 (
  festival_server in Centre for Speech Technology Research (CSTR) Festival,
  probably 2.0.95-beta and earlier, places a zero-length directory name in the
  LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan
  horse shared library in the current working directory.

Please punt vulnerable versions and verify that the current one is fixed.
Comment 1 Jesus Rivero (RETIRED) gentoo-dev 2012-12-04 05:00:52 UTC
Dropped vulnerable versions from the tree.
Comment 2 Sean Amoss (RETIRED) gentoo-dev Security 2012-12-04 22:53:49 UTC
Thanks, Jesus. 

Stabilization was performed in bug 380775 - last arch finished 2011-12-29.

Filing a new GLSA request.
Comment 3 GLSAMaker/CVETool Bot gentoo-dev 2013-12-09 06:24:39 UTC
This issue was resolved and addressed in
 GLSA 201312-06 at
by GLSA coordinator Chris Reffett (creffett).