CVE-2010-3689: apache openoffice Path Traversal

CVSS: 6.9v2.0MediumModified

Published 28-01-2011Last modified 07-08-2024

Vulnerability summary

CVE-2010-3689 is a medium (CVSS 6.9) Path Traversal vulnerability in apache openoffice. EPSS estimates a 0.65% chance of exploitation in the next 30 days, higher than 50.1% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.65%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

DSA-2151-1 RHSA-2011:0182 RHSA-2011:0183

Timeline

28-01-2011
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

soffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.65%

Chance of exploitation in the next 30 days

Percentile

50%

Versus all other CVEs

30-day change

0.00 pp

From 0.65% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.65%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Apache1 product

openoffice≥ 3.0.0, < 3.3.0

Canonical1 product

ubuntu_linuxEOL8.04 | 9.10 | 10.04 | 10.10

Debian1 product

debian_linuxEOL5.0 | 6.0

3 vendors · 3 products

References

19 links

secunia.com/advisories/40775Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/46031VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.debian.org/security/2011/dsa-2151Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/60799Third Party AdvisoryX Refsource SECUNIABroken Link
www.openoffice.org/security/cves/CVE-2010-3689.htmlX Refsource CONFIRMVendor Advisory
www.oracle.com/technetwork/topics/security/cpuapr2011-301950.htmlX Refsource CONFIRMThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-201408-19.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/43065Third Party AdvisoryX Refsource SECUNIABroken Link
www.securitytracker.com/id?1025004VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.vupen.com/english/advisories/2011/0230VDB EntryX Refsource VUPENBroken Link

Show all 19 references

www.vupen.com/english/advisories/2011/0232VDB EntryX Refsource VUPENBroken Link
www.redhat.com/support/errata/RHSA-2011-0182.htmlVendor AdvisoryX Refsource REDHATBroken Link
ubuntu.com/usn/usn-1056-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.vupen.com/english/advisories/2011/0279VDB EntryX Refsource VUPENBroken Link
bugzilla.redhat.com/show_bug.cgi?id=641224X Refsource CONFIRMIssue TrackingThird Party Advisory
secunia.com/advisories/43105Third Party AdvisoryX Refsource SECUNIABroken Link
osvdb.org/70716VDB EntryX Refsource OSVDBBroken Link
www.mandriva.com/security/advisories?name=MDVSA-2011:027Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/42999Third Party AdvisoryX Refsource SECUNIABroken Link

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities