Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://torcs.sourceforge.net/index.php?name=News&file=article&sid=77 http://sourceforge.net/tracker/index.php?func=detail&aid=3089384&group_id=3777&atid=103777 http://www.vuxml.org/freebsd/e7fd27b2-3ae9-11e1-8b5c-00262d5ed8ee.html
Insight
The following package is affected: torcs
CVE-2010-3384
The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Severity
Classification
-
CVE CVE-2010-3384 -
CVSS Base Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities