CVEvulnerability
CVE-2009-5064
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-03-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.
Affected configurations
• gnu glibc (<= 2.1.3)
• gnu glibc 1.00
• gnu glibc 1.01
• gnu glibc 1.02
• gnu glibc 1.03
• gnu glibc 1.04
• gnu glibc 1.05
• gnu glibc 1.06
• gnu glibc 1.07
• gnu glibc 1.08
• gnu glibc 1.09
• gnu glibc 1.09.1
• gnu glibc 2.0
• gnu glibc 2.0.1
• gnu glibc 2.0.2
• gnu glibc 2.0.3
• gnu glibc 2.0.4
• gnu glibc 2.0.5
• gnu glibc 2.0.6
• gnu glibc 2.1
• gnu glibc 2.1.1
• gnu glibc 2.1.1.6
• gnu glibc 2.1.2
Related
Weakness · not in database (1)
References
- http://openwall.com/lists/oss-security/2011/03/07/10 Exploit
- http://openwall.com/lists/oss-security/2011/03/07/13 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/07/7 Exploit
- http://openwall.com/lists/oss-security/2011/03/08/1 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/10 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/2 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/3 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/7 Exploit, Patch
- http://reverse.lostrealm.com/protect/ldd.html Exploit
- http://www.catonmat.net/blog/ldd-arbitrary-code-execution/ Exploit
- http://www.redhat.com/support/errata/RHSA-2011-1526.html www.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=531160 Exploit, Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=682998 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/07/10 Exploit
- http://openwall.com/lists/oss-security/2011/03/07/13 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/07/7 Exploit
- http://openwall.com/lists/oss-security/2011/03/08/1 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/10 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/2 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/3 Exploit, Patch
- http://openwall.com/lists/oss-security/2011/03/08/7 Exploit, Patch
- http://reverse.lostrealm.com/protect/ldd.html Exploit
- http://www.catonmat.net/blog/ldd-arbitrary-code-execution/ Exploit
- http://www.redhat.com/support/errata/RHSA-2011-1526.html www.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=531160 Exploit, Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=682998 Exploit, Patch