CVE-2010-3998: Banshee-Project Banshee

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: Banshee might also be affected using GST_PLUGIN_PATH.

Affected products

• Banshee-Project Banshee: up to and including 1.8.0; version 0.13.2 only; version 1.0 only; version 1.2 only; version 1.2.1 only; version 1.4 only; …

Published 2010-11-06. Last modified 2026-06-16.