Every CVE Search/ Get API key

CVE-2010-3384

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in...

6.9 MediumFix available

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Exploit likelihood

0.38%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
CVE-2010-3384
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
CVE-2010-3384
Updated
2026-11-02
EUVDEUVD-2010-3382 No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
EUVD-2010-3382
Updated
2026-11-03
GitHub AdvisoriesGHSA-5pvx-gc3m-qw38 No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in...

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
GHSA-5pvx-gc3m-qw38
Updated
2026-11-02
OSV No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
CVE-2010-3384
Updated
2026-11-02
OSVDEBIAN-CVE-2010-3384 No score

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record
DEBIAN-CVE-2010-3384
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
torcs
Debian:12
before 1.3.1-5
1.3.1-5
torcs
Debian:13
before 1.3.1-5
1.3.1-5
torcs
Debian:14
before 1.3.1-5
1.3.1-5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3384 is a medium vulnerability (CVSS 6.9) in Bernhard Wymann Torcs, published October 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in torcs 1.3.1-5.

References

MoveEnter Open