Lucene search
Ubuntu.comUB:CVE-2011-1658HistoryApr 08, 2011 - 12:00 a.m.
CVE-2011-1658
2011-04-0800:00:00
ubuntu.com
ubuntu.com
10
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands
the $ORIGIN dynamic string token when RPATH is composed entirely of this
token, which might allow local users to gain privileges by creating a hard
link in an arbitrary directory to a (1) setuid or (2) setgid program with
this RPATH value, and then executing the program with a crafted value for
the LD_PRELOAD environment variable, a different vulnerability than
CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any
standard operating-system distribution would ship an applicable setuid or
setgid program.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1658>
- <http://sourceware.org/bugzilla/show_bug.cgi?id=12393>
Notes
| Author | Note |
|---|---|
| sbeattie | there may be reggressions introduced by the 3 commits below that are addressed by the following commits. http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=47c3cd7a74e8c089d60d603afce6d9cf661178d6;hp=d08055417d0187875806161fab8c4777adfb7ba8 http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=22836f52e3e4740e450f9b93a2f1e31a90b168a6;hp=7b3b0b2a63f7e980adb630550c0dc9639ec09d7f |
Related
cve
cve
prion
prion
Design/Logic Flaw
2011-04-08 15:17:00
Design/Logic Flaw
2011-04-08 15:17:00
Directory traversal
2011-01-07 19:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:55:25
Privilege Escalation
2020-04-10 00:55:27
Denial Of Service (DoS)
2020-04-10 00:54:45
ubuntucve
ubuntucve
CVE-2011-0536
2011-04-08 00:00:00
CVE-2010-3847
2010-10-22 00:00:00
debiancve
debiancve
CVE-2011-0536
2011-04-08 15:17:00
CVE-2010-3847
2011-01-07 19:00:00
nessus
nessus
RHEL 6 : glibc (RHSA-2011:0413)
2011-04-05 00:00:00
redhat
redhat
(RHSA-2011:0413) Important: glibc security update
2011-04-04 00:00:00
(RHSA-2011:0412) Important: glibc security update
2011-04-04 00:00:00
(RHSA-2010:0787) Important: glibc security update
2010-10-20 00:00:00
centos
centos
glibc, nscd security update
2011-04-14 13:51:19
glibc, nscd security update
2010-10-21 09:47:03
openvas
openvas
RedHat Update for glibc RHSA-2011:0413-01
2012-06-06 00:00:00
RedHat Update for glibc RHSA-2011:0413-01
2012-06-06 00:00:00
Gentoo Security Advisory GLSA 201312-01
2015-09-29 00:00:00
oraclelinux
oraclelinux
glibc security update
2011-04-04 00:00:00
glibc security update
2010-10-21 00:00:00
glibc security update
2011-04-04 00:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2013-12-03 00:00:00
GNU C library: Multiple vulnerabilities
2010-11-15 00:00:00
packetstorm
packetstorm
glibc '$ORIGIN' Expansion Privilege Escalation
2018-02-10 00:00:00
GNU C Library Dynamic Linker $ORIGIN Expansion Vulnerability
2010-10-19 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: glibc-2.12.90-17
2010-10-19 22:23:05
[SECURITY] Fedora 13 Update: glibc-2.12.1-3
2010-10-22 18:07:50
[SECURITY] Fedora 12 Update: glibc-2.11.2-3
2010-10-30 23:47:35
zdt
zdt
glibc $ORIGIN Expansion Privilege Escalation Exploit
2018-02-10 00:00:00
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation Exploit
2018-02-10 00:00:00
slackware
slackware
[slackware-security] glibc
2010-10-22 21:19:24
canvas
canvas
Immunity Canvas: CVE_2010_3847
2011-01-07 19:00:00
cert
cert
GNU C library dynamic linker expands $ORIGIN in setuid library search path
2010-10-25 00:00:00
metasploit
metasploit
glibc '$ORIGIN' Expansion Privilege Escalation
2018-02-09 21:15:04
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
2018-01-28 05:11:38
vmware
vmware
securityvulns
securityvulns
glibc multiple security vulnerabilities
2011-12-04 00:00:00
GNU C dynamic linker privilege escalation
2010-10-26 00:00:00
debian
debian
[SECURITY] [DSA 2122-1] New glibc packages fix local privilege escalation
2010-10-22 17:05:33
[SECURITY] [DSA 2122-2] New glibc packages fix privilege escalation
2011-01-11 19:49:11
osv
osv
glibc - privilege escalation
2010-10-22 00:00:00
glibc - local privilege escalation
2010-10-22 00:00:00
exploitpack
exploitpack
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
2010-10-22 00:00:00
GNU C library dynamic linker - $ORIGIN Expansion
2010-10-18 00:00:00
ubuntu
ubuntu
GNU C Library vulnerability
2011-01-12 00:00:00
GNU C Library vulnerabilities
2010-10-22 00:00:00
GNU C Library vulnerabilities
2012-03-09 00:00:00
seebug
seebug
GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
2014-07-01 00:00:00
GNU C library dynamic linker $ORIGIN expansion Vulnerability
2014-07-01 00:00:00
thn
thn
Two Linux vulnerabilities to get root access
2010-10-30 07:21:00
exploitdb
exploitdb
GNU C library dynamic linker - '$ORIGIN' Expansion
2010-10-18 00:00:00
suse
suse
local privilege escalation in glibc
2010-10-28 13:41:00
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for UB:CVE-2011-1658