Lucene search
Gentoo FoundationGLSA-201209-22HistorySep 28, 2012 - 12:00 a.m.
libgssglue: Privilege escalation
2012-09-2800:00:00
Gentoo Foundation
security.gentoo.org
8
0.0004 Low
EPSS
Percentile
5.2%
Background
libgssglue exports a GSSAPI interface which calls other random GSSAPI libraries.
Description
libgssglue does not securely use getenv() when loading a library for a setuid application.
Impact
A local attacker could gain escalated privileges.
Workaround
There is no known workaround at this time.
Resolution
All libgssglue users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/libgssglue-0.4"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-libs/libgssglue | < 0.4 | UNKNOWN |
Related
openvas
openvas
Gentoo Security Advisory GLSA 201209-22 (libgssglue)
2012-10-03 00:00:00
Ubuntu: Security Advisory (USN-1612-1)
2012-10-16 00:00:00
Ubuntu Update for libgssglue USN-1612-1
2012-10-16 00:00:00
nessus
nessus
Fedora 17 : libgssglue-0.4-0.fc17 (2012-7971)
2012-06-18 00:00:00
GLSA-201209-22 : libgssglue: Privilege escalation
2012-09-28 00:00:00
Fedora 16 : libgssglue-0.4-0.fc16 (2012-8067)
2012-06-11 00:00:00
debiancve
debiancve
CVE-2011-2709
2012-06-21 15:55:00
securityvulns
securityvulns
libgssapi / libgssglue privilege escalation
2013-04-09 00:00:00
[ MDVSA-2013:043 ] libgssglue
2013-04-09 00:00:00
ubuntucve
ubuntucve
CVE-2011-2709
2012-06-21 00:00:00
cve
cve
CVE-2011-2709
2012-06-21 15:55:00
fedora
fedora
[SECURITY] Fedora 17 Update: libgssglue-0.4-0.fc17
2012-06-15 12:29:38
[SECURITY] Fedora 16 Update: libgssglue-0.4-0.fc16
2012-06-10 01:35:04
ubuntu
ubuntu
libgssglue vulnerability
2012-10-15 00:00:00
prion
prion
Code injection
2012-06-21 15:55:00
cvelist
cvelist
CVE-2011-2709
2012-06-21 15:00:00