CVEvulnerability

CVE-2004-1453

2.1 LOW Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.

Affected configurations

• gnu glibc 2.0 • gnu glibc 2.0.1 • gnu glibc 2.0.2 • gnu glibc 2.0.3 • gnu glibc 2.0.4 • gnu glibc 2.0.5 • gnu glibc 2.0.6 • gnu glibc 2.1 • gnu glibc 2.1.1 • gnu glibc 2.1.1.6 • gnu glibc 2.1.2 • gnu glibc 2.1.3 • gnu glibc 2.1.3.10 • gnu glibc 2.1.9 • gnu glibc 2.2 • gnu glibc 2.2.1 • gnu glibc 2.2.2 • gnu glibc 2.2.3 • gnu glibc 2.2.4 • gnu glibc 2.2.5 • gnu glibc 2.3 • gnu glibc 2.3.1 • gnu glibc 2.3.2 • gnu glibc 2.3.3 • gnu glibc 2.3.4

References