Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-5064

Опубликовано: 26 окт. 2009
Источник: redhat
CVSS2: 3.7
EPSS Низкий

Описание

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=692393glibc: ldd unexpected code execution issue

EPSS

Процентиль: 23%
0.00073
Низкий

3.7 Low

CVSS2

Связанные уязвимости

nvd
около 14 лет назад

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.

debian
около 14 лет назад

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows ...

github
около 3 лет назад

** DISPUTED ** ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc."

oracle-oval
больше 13 лет назад

ELSA-2011-1526: glibc security, bug fix, and enhancement update (LOW)

oracle-oval
больше 13 лет назад

ELSA-2012-0126: glibc security update (MODERATE)

EPSS

Процентиль: 23%
0.00073
Низкий

3.7 Low

CVSS2