Veracode Vulnerability DatabaseVERACODE:24454Denial Of Service (DoS)
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
glibc is vulnerable to privilege escalation. It was discovered that the glibc dynamic linker/loader did not handle the $ORIGIN dynamic string token set in the LD_AUDIT environment variable securely. A local attacker with write access to a file system containing setuid or setgid binaries could use this flaw to escalate their privileges.
References
seclists.org/fulldisclosure/2010/Oct/257
seclists.org/fulldisclosure/2010/Oct/292
seclists.org/fulldisclosure/2010/Oct/294
secunia.com/advisories/42787
security.gentoo.org/glsa/glsa-201011-01.xml
sourceware.org/ml/libc-hacker/2010-10/msg00007.html
support.avaya.com/css/P8/documents/100120941
www.debian.org/security/2010/dsa-2122
www.kb.cert.org/vuls/id/537223
www.mandriva.com/security/advisories?name=MDVSA-2010:207
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2010-0872.html
www.securityfocus.com/archive/1/515545/100/0/threaded
www.securityfocus.com/bid/44154
www.ubuntu.com/usn/USN-1009-1
www.vmware.com/security/advisories/VMSA-2011-0001.html
www.vupen.com/english/advisories/2011/0025
access.redhat.com/errata/RHSA-2010:0787
access.redhat.com/errata/RHSA-2010:0872
access.redhat.com/security/cve/CVE-2010-3847
bugzilla.redhat.com/show_bug.cgi?id=643306
lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html
rhn.redhat.com/errata/RHSA-2010-0787.html
www.exploit-db.com/exploits/44024/
www.exploit-db.com/exploits/44025/
Related
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C