CVE-2010-4001
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-4001
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gromacs 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gromacs是一套分子动力学模拟程序包，主要用来模拟研究蛋白质、脂质、核酸等生物分子的性质。它起初由荷兰格罗宁根大学生物化学系开发，目前由来自世界各地的大学和研究机构维护。 Gromacs 存在权限许可和访问控制漏洞，Gromacs 4.5.1 及更早版本中的 GMXRC.bash 在 LD_LIBRARY_PATH 中放置了一个零长度的目录名称，这允许本地用户通过当前工作目录中的特洛伊木马共享库获得权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-4001
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-4001
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=644596x_refsource_MISC
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050763.htmlvendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050783.htmlvendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2010-4001
Same Patch Batch · n/a · 2010-11-05 · 37 CVEs total
| CVE-2009-5015 | TurboGears2 URL调度机制未明漏洞 | |
| CVE-2010-4199 | Google Chrome SVG使用元素输入验证错误漏洞 | |
| CVE-2010-4201 | Google Chrome释放后使用漏洞 | |
| CVE-2010-4202 | Google Chrome多个整数溢出漏洞 | |
| CVE-2010-4203 | Google Chrome WebM libvpx缓冲区错误漏洞 | |
| CVE-2010-4204 | Google Chrome WebKit拒绝服务漏洞 | |
| CVE-2010-4205 | Google Chrome事件对象输入验证错误漏洞 | |
| CVE-2010-4206 | Google Chrome WebKit SVG文档数组索引错误漏洞 | |
| CVE-2009-5014 | TurboGears2授权问题漏洞 | |
| CVE-2010-4198 | Google Chrome WebKit内存破坏漏洞 | |
| CVE-2010-1523 | Nullsoft Winamp 'vp6.w5s'堆缓冲区溢出漏洞 | |
| CVE-2010-2477 | Pythonpaste Paste paste.httpexceptions实现多个跨站脚本攻击漏洞 | |
| CVE-2010-3852 | Red Hat Conga Luci授权问题漏洞 | |
| CVE-2010-3915 | JustSystems Ichitaro和Ichitaro Government任意代码执行漏洞 | |
| CVE-2010-3916 | JustSystems Ichitaro 安全漏洞 | |
| CVE-2010-3998 | Banshee LD_LIBRARY_PATH设计错误漏洞 | |
| CVE-2010-4000 | GNOME Shell LD_LIBRARY_PATH权限许可和访问控制漏洞 | |
| CVE-2010-4005 | GNOME Tomboy代码注入漏洞 | |
| CVE-2010-4183 | HTML Purifier多个跨站脚本攻击漏洞 | |
| CVE-2010-3172 | Mozilla Bugzilla CRLF代码注入漏洞 |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2010-4001
No comments yet