Privilege Escalation

🗓️ 10 Apr 2020 01:08:59Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

glibc vulnerability in ldd utility for privilege escalatio

Reporter	Title	Published	Views	Family All 89
ATTACKERKB	CVE-2009-5064	30 Mar 201122:55	–	attackerkb
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

Vulners

Node

gnu glibcMatch2.12_1.7.el6_0.4

gnu glibcMatch2.12_1.25.el6

gnu glibcMatch2.12_1.7.el6

gnu glibcMatch2.12_1.25.el6_1.3

gnu glibcMatch2.12_1.7.el6_0.5

gnu glibcMatch2.12_1.7.el6_0.3

gnu glibcMatch2.5_49.el5_5.2

gnu glibcMatch2.5_18.el5_1.1

gnu glibcMatch2.5_49.el5_5.4

gnu glibcMatch2.5_49.el5_5.5

gnu glibcMatch2.5_49.el5_5.6

gnu glibcMatch2.5_58.el5_6.4

gnu glibcMatch2.5_49.el5_5.7

gnu glibcMatch2.5_58.el5_6.3

gnu glibcMatch2.5_42.el5_4.3

gnu glibcMatch2.5_34.el5_3.1

gnu glibcMatch2.5_42.el5_4.2

gnu glibcMatch2.5_58.el5_6.2

gnu glibcMatch2.5_24.el5_2.2

Source	Link
access	www.access.redhat.com/security/updates/classification/
access	www.access.redhat.com/errata/RHSA-2011:1526
docs	www.docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/glibc.html
reverse	www.reverse.lostrealm.com/protect/ldd.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
catonmat	www.catonmat.net/blog/ldd-arbitrary-code-execution/
openwall	www.openwall.com/lists/oss-security/2011/03/07/13
openwall	www.openwall.com/lists/oss-security/2011/03/07/10
openwall	www.openwall.com/lists/oss-security/2011/03/07/7

07 Aug 2024 11:37Current

4Medium risk

Vulners AI Score4

CVSS 26.9

EPSS0.00538