Unscored severity · published Oct 20, 2010
CVE-2010-3354
dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the…
–
CVSS
0.3%
EPSS
No
On KEV
Description
dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
Dropbox · Dropbox
0.7.110 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3354
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598287
More from Dropbox
8.8
CVE-2024-5924
Dropbox Desktop Folder Sharing Mark-of-the-Web Bypass Vulnerability
7.8
CVE-2019-12171
Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account…
6.4
CVE-2018-12271
An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS
3.6
CVE-2018-12446
An issue was discovered in the com.dropbox.android application 98.2.2 for Android
3.1
CVE-2018-12445
An issue was discovered in the com.dropbox.android application 98.2.2 for Android