Lucene search
+L

1 matches found

securityvulns
securityvulns
added 2000/09/26 12:0 a.m.30 views

ld.so bug - LD_DEBUG_OUTPUT follows symlinks

Hi, ld.so from glibc2 doesn't unset variables LDDEBUGOUTPUT and LDDEBUG when running suid. If program calls setuid0 and then fork, child process will follow prepared symlink $LDDEBUGOUTPUT.$pid and overwrites any file in system. Jakub Vlasek...

1.5AI score
SaveExploits0
Rows per page
Query Builder