Lucene search
Ubuntu.comUB:CVE-2011-0536HistoryApr 08, 2011 - 12:00 a.m.
CVE-2011-0536
2011-04-0800:00:00
ubuntu.com
ubuntu.com
15
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%
Multiple untrusted search path vulnerabilities in elf/dl-object.c in
certain modified versions of the GNU C Library (aka glibc or libc6),
including glibc-2.5-49.el5_5.6 and glibc-2.12-1.7.el6_0.3 in Red Hat
Enterprise Linux, allow local users to gain privileges via a crafted
dynamic shared object (DSO) in a subdirectory of the current working
directory during execution of a (1) setuid or (2) setgid program that has
$ORIGIN in (a) RPATH or (b) RUNPATH within the program itself or a
referenced library. NOTE: this issue exists because of an incorrect fix for
CVE-2010-3847.
Related
prion
prion
Design/Logic Flaw
2011-04-08 15:17:00
Design/Logic Flaw
2011-04-08 15:17:00
Directory traversal
2011-01-07 19:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:55:25
Denial Of Service (DoS)
2020-04-10 00:54:45
cve
cve
debiancve
debiancve
CVE-2011-0536
2011-04-08 15:17:00
CVE-2010-3847
2011-01-07 19:00:00
nessus
nessus
Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : eglibc, glibc vulnerability (USN-1009-2)
2011-01-12 00:00:00
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : glibc, eglibc vulnerabilities (USN-1009-1)
2010-10-24 00:00:00
Scientific Linux Security Update : glibc on SL5.x,SL6.x i386/x86_64
2012-08-01 00:00:00
ubuntucve
ubuntucve
CVE-2011-1658
2011-04-08 00:00:00
CVE-2010-3847
2010-10-22 00:00:00
openvas
openvas
RedHat Update for glibc RHSA-2011:0413-01
2012-06-06 00:00:00
RedHat Update for glibc RHSA-2011:0413-01
2012-06-06 00:00:00
CentOS Update for glibc CESA-2011:0412 centos5 i386
2011-08-09 00:00:00
packetstorm
packetstorm
glibc '$ORIGIN' Expansion Privilege Escalation
2018-02-10 00:00:00
GNU C Library Dynamic Linker $ORIGIN Expansion Vulnerability
2010-10-19 00:00:00
oraclelinux
oraclelinux
glibc security update
2010-10-21 00:00:00
glibc security and bug fix update
2011-02-10 00:00:00
glibc security update
2011-04-04 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: glibc-2.12.90-17
2010-10-19 22:23:05
[SECURITY] Fedora 13 Update: glibc-2.12.1-3
2010-10-22 18:07:50
[SECURITY] Fedora 12 Update: glibc-2.11.2-3
2010-10-30 23:47:35
zdt
zdt
glibc $ORIGIN Expansion Privilege Escalation Exploit
2018-02-10 00:00:00
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation Exploit
2018-02-10 00:00:00
slackware
slackware
[slackware-security] glibc
2010-10-22 21:19:24
canvas
canvas
Immunity Canvas: CVE_2010_3847
2011-01-07 19:00:00
cert
cert
GNU C library dynamic linker expands $ORIGIN in setuid library search path
2010-10-25 00:00:00
redhat
redhat
(RHSA-2010:0787) Important: glibc security update
2010-10-20 00:00:00
(RHSA-2011:0413) Important: glibc security update
2011-04-04 00:00:00
(RHSA-2011:0412) Important: glibc security update
2011-04-04 00:00:00
metasploit
metasploit
glibc '$ORIGIN' Expansion Privilege Escalation
2018-02-09 21:15:04
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
2018-01-28 05:11:38
centos
centos
glibc, nscd security update
2010-10-21 09:47:03
glibc, nscd security update
2011-04-14 13:51:19
securityvulns
securityvulns
GNU C dynamic linker privilege escalation
2010-10-26 00:00:00
osv
osv
glibc - privilege escalation
2010-10-22 00:00:00
glibc - local privilege escalation
2010-10-22 00:00:00
debian
debian
[SECURITY] [DSA 2122-1] New glibc packages fix local privilege escalation
2010-10-22 17:05:33
[SECURITY] [DSA 2122-2] New glibc packages fix privilege escalation
2011-01-11 19:49:11
exploitpack
exploitpack
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
2010-10-22 00:00:00
GNU C library dynamic linker - $ORIGIN Expansion
2010-10-18 00:00:00
ubuntu
ubuntu
GNU C Library vulnerability
2011-01-12 00:00:00
GNU C Library vulnerabilities
2010-10-22 00:00:00
seebug
seebug
GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
2014-07-01 00:00:00
GNU C library dynamic linker $ORIGIN expansion Vulnerability
2014-07-01 00:00:00
thn
thn
Two Linux vulnerabilities to get root access
2010-10-30 07:21:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2013-12-03 00:00:00
GNU C library: Multiple vulnerabilities
2010-11-15 00:00:00
exploitdb
exploitdb
GNU C library dynamic linker - '$ORIGIN' Expansion
2010-10-18 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console packages glibc, sudo, and openldap
2011-01-04 00:00:00
VMware ESX third party updates for Service Console packages glibc, sudo, and openldap
2011-01-04 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
suse
suse
local privilege escalation in glibc
2010-10-28 13:41:00
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
9.3%
Related for UB:CVE-2011-0536