PT-2019-6865

Name of the Vulnerable Software and Affected Versions ruby193 affected versions not specified Description The issue is related to an insecure setting of the LD LIBRARY PATH environment variable in ruby193. Recommendations At the moment, there is no information about a newer version that contains ...

DEBIAN-CVE-2017-1000409

A buffer overflow in glibc 2.5 released on September 29, 2006 and can be triggered through the LDLIBRARYPATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366...

glibc buffer overflow vulnerability (CNVD-2018-04663)

glibc a.k.a. GNU C Library, libc6 is an open-source, free C language compiler released under the LGPL license. A buffer overflow vulnerability exists in glibc version 2.5 because the program fails to properly resolve the LDLIBRARYPATH environment variable. A local attacker can use the LDLIBRARYPA...

UBUNTU-CVE-2017-1000409

A buffer overflow in glibc 2.5 released on September 29, 2006 and can be triggered through the LDLIBRARYPATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366...

CVE-2017-4921

VMware vCenter Server 6.5 prior to 6.5 U1 contains an insecure library loading issue that occurs due to the use of LDLIBRARYPATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation...

PT-2017-16204

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 6.5 prior to 6.5 U1 Description The issue is related to an insecure library loading problem due to the unsafe use of the LD LIBRARY PATH variable. This could allow unprivileged host users to load a shared library...

DEBIAN-CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap...

UBUNTU-CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap...

PT-2017-4267

Name of the Vulnerable Software and Affected Versions glibc versions 2.25 and earlier Description The issue is related to a buffer overflow in memory, allowing an attacker to access confidential data, compromise its integrity, and cause a denial of service. Additionally, it is possible to...

httpd: insecure handling of LD_LIBRARY_PATH in envvars

envvars aka envvars-std in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl...

PT-2011-2747

Name of the Vulnerable Software and Affected Versions SunScreen Firewall version on SunOS 5.9 Description The issue concerns untrusted search path vulnerabilities in the Java Service of SunScreen Firewall on SunOS 5.9, allowing local users to execute arbitrary code. This can be achieved by...

PT-2011-1223

Name of the Vulnerable Software and Affected Versions OpenOffice.org OOo versions 3.x before 3.3 Description The issue is related to the environment variable LD LIBRARY PATH in Apache OpenOffice office programs, which is connected to a lack of privilege control mechanisms and access management...

Mozilla unsafe library loading flaw

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan hor...

DEBIAN-CVE-2010-3999

gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-5228

Name of the Vulnerable Software and Affected Versions Banshee versions 1.8.0 and earlier Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the banshee-1 and muinshee scripts in affected versions of Banshe...

DEBIAN-CVE-2010-3394

The 1 texmacs and 2 tmmupadhelp scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

DEBIAN-CVE-2010-3384

The 1 torcs, 2 nfsperf, 3 accc, 4 texmapper, 5 trackgen, and 6 nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

UBUNTU-CVE-2010-3393

magics-config in Magics++ 2.10.0 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-4766

Name of the Vulnerable Software and Affected Versions roaraudio version 0.3 Description The issue in roaraudio allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to roarify placing a zero-length directory name in the LD LIBRARY...

PT-2010-4775

Name of the Vulnerable Software and Affected Versions Scilab version 5.2.2 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the scilab, scilab-cli, and scilab-adv-cli scripts placing a zero-length...