Lucene search
GoogleOSV:DSA-2122-1HistoryOct 22, 2010 - 12:00 a.m.
glibc - local privilege escalation
2010-10-2200:00:00
Google
osv.dev
18
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
Ben Hawkes and Tavis Ormandy discovered that the dynamic loader in GNU
libc allows local users to gain root privileges using a crafted
LD_AUDIT environment variable.
For the stable distribution (lenny), this problem has been fixed in
version 2.7-18lenny6.
For the upcoming stable distribution (squeeze), this problem has been
fixed in version 2.11.2-6+squeeze1 of the eglibc package.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you upgrade your glibc packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| glibc | eq | 2.7-18lenny2 | |
| glibc | eq | 2.7-18lenny4 | |
| glibc | eq | 2.7-18 | |
| glibc | eq | 2.7-18lenny1 |
References
Related
fedora
fedora
[SECURITY] Fedora 12 Update: glibc-2.11.2-3
2010-10-30 23:47:35
[SECURITY] Fedora 13 Update: glibc-2.12.1-4
2010-10-28 22:19:55
[SECURITY] Fedora 14 Update: glibc-2.12.90-18
2010-10-28 22:21:37
redhat
redhat
(RHSA-2010:0872) Important: glibc security and bug fix update
2010-11-10 00:00:00
(RHSA-2010:0793) Important: glibc security update
2010-10-25 00:00:00
(RHSA-2010:0787) Important: glibc security update
2010-10-20 00:00:00
securityvulns
securityvulns
GNU C dynamic linker privilege escalation
2010-10-26 00:00:00
osv
osv
glibc - privilege escalation
2010-10-22 00:00:00
openvas
openvas
Fedora Update for glibc FEDORA-2010-16641
2010-11-16 00:00:00
Debian: Security Advisory (DSA-2122)
2011-03-07 00:00:00
Oracle: Security Advisory (ELSA-2010-0872)
2015-10-06 00:00:00
oraclelinux
oraclelinux
glibc security and bug fix update
2011-02-10 00:00:00
glibc security update
2010-10-21 00:00:00
glibc security update
2010-10-25 00:00:00
nessus
nessus
RHEL 6 : glibc (RHSA-2010:0872)
2010-11-18 00:00:00
Debian DSA-2122-1 : glibc - missing input sanitization
2010-10-24 00:00:00
Oracle Linux 6 : glibc (ELSA-2010-0872)
2013-07-12 00:00:00
packetstorm
packetstorm
GNU C Library Dynamic Linker Arbitrary DSO dlopen
2010-10-22 00:00:00
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
2018-02-10 00:00:00
debian
debian
[SECURITY] [DSA 2122-1] New glibc packages fix local privilege escalation
2010-10-22 17:05:33
[SECURITY] [DSA 2122-2] New glibc packages fix privilege escalation
2011-01-11 19:49:11
metasploit
metasploit
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
2018-01-28 05:11:38
glibc '$ORIGIN' Expansion Privilege Escalation
2018-02-09 21:15:04
zdt
zdt
glibc LD_AUDIT libmemusage.so RHEL-Based Arbitrary DSO Load Privilege Escalation Exploit
2018-04-01 00:00:00
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation Exploit
2018-02-10 00:00:00
Glibc 2.11.3 / 2.12.x LD_AUDIT libmemusage.so Local Root Exploit
2013-05-19 00:00:00
seebug
seebug
GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
2014-07-01 00:00:00
glibc LD_AUDIT arbitrary DSO load Privilege Escalation
2014-07-01 00:00:00
GNU C library dynamic linker $ORIGIN expansion Vulnerability
2014-07-01 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2010-10-22 00:00:00
GNU C Library vulnerability
2011-01-12 00:00:00
exploitpack
exploitpack
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
2010-10-22 00:00:00
glibc - LD_AUDIT Arbitrary DSO Load Privilege Escalation
2011-11-10 00:00:00
GNU C library dynamic linker - $ORIGIN Expansion
2010-10-18 00:00:00
exploitdb
exploitdb
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
2010-10-22 00:00:00
glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation
2011-11-10 00:00:00
GNU C library dynamic linker - '$ORIGIN' Expansion
2010-10-18 00:00:00
vmware
vmware
cve
cve
centos
centos
glibc, nscd security update
2010-10-26 06:41:49
glibc, nscd security update
2010-10-21 09:47:03
glibc, nscd security update
2011-04-14 13:51:19
veracode
veracode
Privilege Escalation
2020-04-10 00:49:52
Denial Of Service (DoS)
2020-04-10 00:54:45
Privilege Escalation
2020-04-10 00:55:25
slackware
slackware
[slackware-security] glibc
2010-10-29 04:49:56
[slackware-security] glibc
2010-10-22 21:19:24
canvas
canvas
Immunity Canvas: CVE_2010_3847
2011-01-07 19:00:00
Immunity Canvas: CVE_2010_3856
2011-01-07 19:00:00
prion
prion
Directory traversal
2011-01-07 19:00:00
Design/Logic Flaw
2011-01-07 19:00:00
Design/Logic Flaw
2011-04-08 15:17:00
cert
cert
GNU C library dynamic linker expands $ORIGIN in setuid library search path
2010-10-25 00:00:00
debiancve
debiancve
ubuntucve
ubuntucve
d2
d2
DSquare Exploit Pack: D2SEC_CVE_2010_3856
2011-01-07 19:00:00
gentoo
gentoo
GNU C library: Multiple vulnerabilities
2010-11-15 00:00:00
GNU C Library: Multiple vulnerabilities
2013-12-03 00:00:00
thn
thn
Two Linux vulnerabilities to get root access
2010-10-30 07:21:00
suse
suse
local privilege escalation in glibc
2010-10-28 13:41:00
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related for OSV:DSA-2122-1