CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Permissions Privileges and Access Controls
Summary: ** disputed ** gmxrc.bash in gromacs 4.5.1 and earlier places a zero-length directory name in the ld_library_path, which allows local users to gain privileges via a trojan horse shared library in the current working directory.  note: cve disputes this issue because the gmxldlib value is always added to the beginning of ld_library_path at a later point in the script.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2010-11-06
Last Modified Date: 2011-09-15