CVE-2010-2945

Published: Aug 30, 2010Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.

Affected (11)

Products: Simone Rota: Slim Simple Login Manager

Simone Rota

1 product

Slim Simple Login Manager

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Simone Rota Slim Simple Login Manager	Up to 1.3.1
Simone Rota Slim Simple Login Manager	Version 1.0.0
Simone Rota Slim Simple Login Manager	Version 1.1.0
Simone Rota Slim Simple Login Manager	Version 1.2.0
Simone Rota Slim Simple Login Manager	Version 1.2.1
Simone Rota Slim Simple Login Manager	Version 1.2.2
Simone Rota Slim Simple Login Manager	Version 1.2.3
Simone Rota Slim Simple Login Manager	Version 1.2.4
Simone Rota Slim Simple Login Manager	Version 1.2.5
Simone Rota Slim Simple Login Manager	Version 1.2.6
Simone Rota Slim Simple Login Manager	Version 1.3.0