Privilege Escalation Vulnerability in Magics++ 2.10.0
Summary
CVE-2010-3393: magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Affects magics++ versions < 2.10.0.dfsg-5.1. Fixed in 2.10.0.dfsg-5.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Magics++ is a powerful software package used for meteorological data visualization and analysis. It provides various tools for creating high-quality graphical representations of weather data. The package is widely utilized in scientific research and operational meteorology. However, a vulnerability has been identified in version 2.10.0 that can potentially allow local users to gain elevated privileges through improper handling of the LD_LIBRARY_PATH environment variable.
Vulnerability Detail
The vulnerability arises from the magics-config script in Magics++ 2.10.0, which incorrectly sets a zero-length directory name in the LD_LIBRARY_PATH. This misconfiguration allows local users to place a Trojan horse shared library in their current working directory. When the application is executed, it may inadvertently load this malicious library, leading to privilege escalation and unauthorized access to system resources.
How To Fix
Minimum fixed version
2.10.0.dfsg-5.1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade magics++Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually unset the LD_LIBRARY_PATH variable before running applications that depend on Magics++. This can be done by executing the following command in the terminal:
unset LD_LIBRARY_PATH
This will prevent the application from loading any libraries from the current working directory, mitigating the risk of privilege escalation.
Conclusion
The identified vulnerability in Magics++ 2.10.0 poses a significant risk of privilege escalation for local users. It is crucial to upgrade to a secure version to mitigate this risk. Users should also consider using workarounds until they can apply the necessary updates. Monitoring tools like Vulert can assist in keeping track of vulnerabilities in open-source software.
See every vulnerability recorded for magics++ →
FAQ
The vulnerability allows local users to gain elevated privileges, potentially leading to unauthorized access to sensitive data and system resources.
You can check your version by running 'magics++ --version' in the terminal. If it is 2.10.0, it is affected.
Yes, you can use Vulert to monitor and alert you in real-time for open-source vulnerabilities in your software without needing to access the code directly.
If an immediate upgrade is not possible, consider using the workaround to unset the LD_LIBRARY_PATH variable before running affected applications.
Detailed information can be found in the CVE database or by visiting the official Magics++ documentation.
Related vulnerabilities
Recent vulnerabilities recorded for magics++.
