Every CVESearch/Get API key

CVE-2010-3384

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in...

6.9 MediumFix available

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Exploit likelihood

0.38%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.9

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
CVE-2010-3384
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
CVE-2010-3384
Updated
2026-11-02
EUVDEUVD-2010-3382No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
EUVD-2010-3382
Updated
2026-11-03
GitHub AdvisoriesGHSA-5pvx-gc3m-qw38No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in...

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
GHSA-5pvx-gc3m-qw38
Updated
2026-11-02
OSVNo score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
CVE-2010-3384
Updated
2026-11-02
OSVDEBIAN-CVE-2010-3384No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
DEBIAN-CVE-2010-3384
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
torcs
Debian:12
before 1.3.1-5
1.3.1-5
torcs
Debian:13
before 1.3.1-5
1.3.1-5
torcs
Debian:14
before 1.3.1-5
1.3.1-5

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3384 is a medium vulnerability (CVSS 6.9) in Bernhard Wymann Torcs, published October 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in torcs 1.3.1-5.

References

MoveEnter Open