https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 00:17:19 +0000 https://db.gcve.eu/vuln/fkie_cve-2010-3996 <p>festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</p> <p>festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</p> https://db.gcve.eu/vuln/fkie_cve-2010-3996 https://db.gcve.eu/vuln/ghsa-x4c2-mfpm-hc2q <p>festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</p> <p>festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</p> https://db.gcve.eu/vuln/ghsa-x4c2-mfpm-hc2q https://db.gcve.eu/vuln/gsd-2010-3996 gsd-2010-3996 https://db.gcve.eu/vuln/gsd-2010-3996 https://db.gcve.eu/vuln/oesa-2022-1589 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: festival, openEuler:20.03-LTS-SP2: festival, openEuler:20.03-LTS-SP3: festival</p> <p>Festival offers a general framework for building speech synthesis systems as well as including examples of various modules. As a whole it offers full text to speech through a number APIs: from shell level, though a Scheme command interpreter, as a C++ library, from Java, and an Emacs interface. Security Fix(es): festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.(CVE-2010-3996)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: festival, openEuler:20.03-LTS-SP2: festival, openEuler:20.03-LTS-SP3: festival</p> <p>Festival offers a general framework for building speech synthesis systems as well as including examples of various modules. As a whole it offers full text to speech through a number APIs: from shell level, though a Scheme command interpreter, as a C++ library, from Java, and an Emacs interface. Security Fix(es): festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.(CVE-2010-3996)</p> https://db.gcve.eu/vuln/oesa-2022-1589 https://db.gcve.eu/vuln/ubuntu-cve-2010-3996 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: festival</p> <p>festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: festival</p> <p>festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.</p> https://db.gcve.eu/vuln/ubuntu-cve-2010-3996