SuSE 10 Security Update : glibc (ZYPP Patch Number 7201)

Several security issues were fixed : - Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion triggers before the respective co...

openSUSE Security Update : glibc (openSUSE-SU-2010:0914-1)

This update of glibc fixes various bugs and security issues : CVE-2010-3847: Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an...

openSUSE Security Update : glibc (openSUSE-SU-2010:0913-1)

This update of glibc fixes various bugs and security issues : CVE-2010-3847: Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2010:0793 Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Mandriva Update for glibc MDVSA-2010:212 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDVSA-2010:212 glibc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for glibc MDVSA-2010:212 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDVSA-2010:212 glibc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu: Security Advisory (USN-1009-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : glibc (RHSA-2010:0793)

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Fedora Update for glibc FEDORA-2010-16594

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu Update for glibc, eglibc vulnerabilities USN-1009-1

Ubuntu Update for Linux kernel vulnerabilities USN-1009-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10091.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for glibc, eglibc vulnerabilities USN-1009-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Fedora Update for glibc FEDORA-2010-16594

Check for the Version of glibc OpenVAS Vulnerability Test Fedora Update for glibc FEDORA-2010-16594 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

glibc: ld.so arbitrary DSO loading via LD_AUDIT in setuid/setgid programs

ld.so in the GNU C Library aka glibc or libc6 before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LDAUDIT environment variable to reference dynamic shared objects DSOs as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a...

Important: Red Hat Security Advisory: glibc security update

Updated glibc packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

glibc security update

2.5-49.el55.7 - Require suid bit on audit objects in privileged programs 645677, CVE-2010-3856...

Mandriva Linux Security Advisory : glibc (MDVSA-2010:212)

A vulnerability in the GNU C library glibc was discovered which could escalate the privilegies for local users CVE-2010-3856. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...

GNU C library dynamic linker expands $ORIGIN in setuid library search path

Overview Certain versions of glibc unsafely handle the $ORIGIN ELF substitution sequence which can be exploited to gain local privilege escalation. Description Tavis Ormandy's advisory states:"$ORIGIN is an ELF substitution sequence representing the location of the executable being loaded in the...

Fedora 13 : glibc-2.12.1-3 (2010-16594)

Fix strstr and memmem algorithm BZ12092, 641124 - Fix handling of tail bytes of buffer in SSE2/SSSE3 x86-64 version strncmp BZ12077 - Never expand $ORIGIN in privileged programs 643306, CVE-2010-3847 Note that Tenable Network Security has extracted the preceding description block directly from...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / current : glibc (SSA:2010-295-01)

New glibc packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-295-01. The text itse...

The GNU C library dynamic linker expands $ORIGIN in setuid library search path

The GNU C library dynamic linker expands $ORIGIN in setuid library search path ------------------------------------------------------------------------------ Gruezi, This is CVE-2010-3847. The dynamic linker or dynamic loader is responsible for the runtime linking of dynamically linked programs...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : glibc, eglibc vulnerabilities (USN-1009-1)

Tavis Ormandy discovered multiple flaws in the GNU C Library's handling of the LDAUDIT environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges. CVE-2010-3847, CVE-2010-3856. Note that Tenable Network Security has extracted the preceding...