Veracode Vulnerability DatabaseVERACODE:24232Privilege Escalation
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
glibc is vulnerable to privilege escalation. The vulnerability exists as it was discovered that the glibc dynamic linker/loader did not perform sufficient safety checks when loading dynamic shared objects (DSOs) to provide callbacks for its auditing API during the execution of privileged programs. A local attacker could use this flaw to escalate their privileges via a carefully-chosen system DSO library containing unsafe constructors.
References
packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
seclists.org/fulldisclosure/2010/Oct/344
seclists.org/fulldisclosure/2019/Jun/18
secunia.com/advisories/42787
security.gentoo.org/glsa/glsa-201011-01.xml
sourceware.org/ml/libc-hacker/2010-10/msg00010.html
support.avaya.com/css/P8/documents/100121017
www.debian.org/security/2010/dsa-2122
www.mandriva.com/security/advisories?name=MDVSA-2010:212
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2010-0872.html
www.securityfocus.com/archive/1/515545/100/0/threaded
www.securityfocus.com/bid/44347
www.ubuntu.com/usn/USN-1009-1
www.vmware.com/security/advisories/VMSA-2011-0001.html
www.vupen.com/english/advisories/2011/0025
access.redhat.com/errata/RHSA-2010:0793
access.redhat.com/errata/RHSA-2010:0872
access.redhat.com/security/cve/CVE-2010-3856
bugzilla.redhat.com/show_bug.cgi?id=645672
lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html
rhn.redhat.com/errata/RHSA-2010-0793.html
seclists.org/bugtraq/2019/Jun/14
www.exploit-db.com/exploits/44025/
Related
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C