The (1) texmacs and (2) tm_mupad_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

The remote host is affected by the vulnerability described in GLSA-201401-27 (GNU TeXmacs: Privilege escalation)

    The texmacs and tm_mupad_help scripts in TeXmacs place a zero-length       directory name in the LD_LIBRARY_PATH, which might result in the current       working directory (.) to be included when searching for dynamically       linked libraries.
  Impact :

    A local attacker could gain escalated privileges via a specially crafted       shared library.
  Workaround :

    There is no known workaround at this time.

fix CVE-2010-3394 (#638428) package fonts according to fedora font packaging guidelines (#477464) update to 1.0.7.9 (#593625)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
72129	GLSA-201401-27 : GNU TeXmacs: Privilege escalation	Nessus	Gentoo Local Security Checks	medium
52558	Fedora 13 : TeXmacs-1.0.7.9-2.fc13 (2011-2146)	Nessus	Fedora Local Security Checks	medium
52555	Fedora 14 : TeXmacs-1.0.7.9-2.fc14 (2011-2127)	Nessus	Fedora Local Security Checks	medium
52522	Fedora 15 : TeXmacs-1.0.7.9-2.fc15 (2011-2247)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-3394

high

Tenable Plugins

medium

medium

medium

medium