# CVEs published 2010-10-20

32 CVEs were published on October 20, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0782](https://cve.now/CVE-2010-0782.md): IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X.509 certificate authentication, and send or r (no CVSS)
- [CVE-2010-2057](https://cve.now/CVE-2010-2057.md): shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State wi (no CVSS, org.apache.myfaces.shared:myfaces-shared-core · org.apache.…)
- [CVE-2010-3349](https://cve.now/CVE-2010-3349.md): Ardour 2.8.11 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse sha (no CVSS)
- [CVE-2010-3350](https://cve.now/CVE-2010-3350.md): bareFTP 0.3.4 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse sha (no CVSS)
- [CVE-2010-3351](https://cve.now/CVE-2010-3351.md): startBristol in Bristol 0.60.5 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a (no CVSS)
- [CVE-2010-3353](https://cve.now/CVE-2010-3353.md): Cowbell 0.2.7.1 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse s (no CVSS)
- [CVE-2010-3354](https://cve.now/CVE-2010-3354.md): dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Tr (no CVSS)
- [CVE-2010-3355](https://cve.now/CVE-2010-3355.md): Ember 0.5.7 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse share (no CVSS)
- [CVE-2010-3357](https://cve.now/CVE-2010-3357.md): gnome-subtitles 1.0 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan hor (no CVSS)
- [CVE-2010-3358](https://cve.now/CVE-2010-3358.md): HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a T (no CVSS)
- [CVE-2010-3360](https://cve.now/CVE-2010-3360.md): Hipo 0.6.1 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse shared (no CVSS)
- [CVE-2010-3361](https://cve.now/CVE-2010-3361.md): The (1) iked, (2) ikea, and (3) ikec scripts in Shrew Soft IKE 2.1.5 place a zero-length directory name in the LD\_LIBRARY\_PATH, which allows (no CVSS)
- [CVE-2010-3362](https://cve.now/CVE-2010-3362.md): lastfm 1.5.4 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse shar (no CVSS)
- [CVE-2010-3363](https://cve.now/CVE-2010-3363.md): roarify in roaraudio 0.3 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Troja (no CVSS)
- [CVE-2010-3364](https://cve.now/CVE-2010-3364.md): The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges (no CVSS)
- [CVE-2010-3365](https://cve.now/CVE-2010-3365.md): Mistelix 0.31 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse sha (no CVSS)
- [CVE-2010-3366](https://cve.now/CVE-2010-3366.md): Mn\_Fit 5.13 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse share (no CVSS)
- [CVE-2010-3369](https://cve.now/CVE-2010-3369.md): The (1) mdb and (2) mdb-symbolreader scripts in mono-debugger 2.4.3, and other versions before 2.8.1, place a zero-length directory name in (no CVSS)
- [CVE-2010-3376](https://cve.now/CVE-2010-3376.md): The (1) proofserv, (2) xrdcp, (3) xrdpwdadmin, and (4) xrd scripts in ROOT 5.18/00 place a zero-length directory name in the LD\_LIBRARY\_PATH (no CVSS)
- [CVE-2010-3377](https://cve.now/CVE-2010-3377.md): The (1) runSalome, (2) runTestMedCorba, (3) runLightSalome, and (4) hxx2salome scripts in SALOME 5.1.3 place a zero-length directory name in (no CVSS)
- [CVE-2010-3378](https://cve.now/CVE-2010-3378.md): The (1) scilab, (2) scilab-cli, and (3) scilab-adv-cli scripts in Scilab 5.2.2 place a zero-length directory name in the LD\_LIBRARY\_PATH, wh (no CVSS)
- [CVE-2010-3381](https://cve.now/CVE-2010-3381.md): The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0.3.2.2 place a zero-length directory name in the LD\_LIBRARY\_PATH, which (no CVSS)
- [CVE-2010-3382](https://cve.now/CVE-2010-3382.md): tauex in Tuning and Analysis Utilities (TAU) 2.16.4 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to (no CVSS)
- [CVE-2010-3383](https://cve.now/CVE-2010-3383.md): The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD\_LIBRARY\_PATH, which allo (no CVSS)
- [CVE-2010-3384](https://cve.now/CVE-2010-3384.md): The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name (no CVSS)
- [CVE-2010-3385](https://cve.now/CVE-2010-3385.md): TuxGuitar 1.2 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan horse sha (no CVSS)
- [CVE-2010-3386](https://cve.now/CVE-2010-3386.md): usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gai (no CVSS)
- [CVE-2010-3387](https://cve.now/CVE-2010-3387.md): vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain (no CVSS)
- [CVE-2010-3389](https://cve.now/CVE-2010-3389.md): The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zer (no CVSS)
- [CVE-2010-3393](https://cve.now/CVE-2010-3393.md): magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via (no CVSS)
- [CVE-2010-3394](https://cve.now/CVE-2010-3394.md): The (1) texmacs and (2) tm\_mupad\_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD\_LIBRARY\_PATH, which allows loc (no CVSS)
- [CVE-2010-4007](https://cve.now/CVE-2010-4007.md): Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perfo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.