CVE-2010-0002

GNU Bash 4.0 - 'ls' Control Character Command Injection

Severity Score

2.1

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename.

La secuencia de comandos /etc/profile.d/60alias.sh en el paquete Mandriva bash para Bash v2.05b, v3.0, v3.2, v3.2.48, y v4.0 activa la opción --show-control-chars en LS_OPTIONS, lo que permite a usuarios locales enviar secuencias de escape a los emuladores de terminal o esconder un archivo, a través del nombre de un nombre de archivo manipulado.

*Credits: N/A

CVSS Scores

NISTv2 2.1

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-12-14 CVE Reserved
2010-01-13 First Exploit
2010-01-14 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation

CAPEC

References (3)

URL	Tag	Source
https://qa.mandriva.com/show_bug.cgi?id=56882	X_refsource_confirm

URL	Date	SRC
https://www.exploit-db.com/exploits/33508	2010-01-13

URL	Date	SRC
http://www.mandriva.com/security/advisories?name=MDVSA-2010:004	2011-08-08

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gnu Search vendor "Gnu"		Bash Search vendor "Gnu" for product "Bash"				2.05 Search vendor "Gnu" for product "Bash" and version "2.05"		b		Affected
Gnu Search vendor "Gnu"		Bash Search vendor "Gnu" for product "Bash"				3.0 Search vendor "Gnu" for product "Bash" and version "3.0"		-		Affected
Gnu Search vendor "Gnu"		Bash Search vendor "Gnu" for product "Bash"				3.2 Search vendor "Gnu" for product "Bash" and version "3.2"		-		Affected
Gnu Search vendor "Gnu"		Bash Search vendor "Gnu" for product "Bash"				3.2.48 Search vendor "Gnu" for product "Bash" and version "3.2.48"		-		Affected
Gnu Search vendor "Gnu"		Bash Search vendor "Gnu" for product "Bash"				4.0 Search vendor "Gnu" for product "Bash" and version "4.0"		-		Affected