CVE

Id
22268  
CVE No.
CVE-2006-6164  
Status
Candidate  
Description
The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, which allows local users to pass dangerous variables such as LD_PRELOAD to loading processes, which might be leveraged to gain privileges.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215142 22268 CVE-2006-6164 BUGTRAQ:20061122 Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.  View
215143 22268 CVE-2006-6164 URL:http://www.securityfocus.com/archive/1/archive/1/452371/100/0/threaded  View
215144 22268 CVE-2006-6164 BUGTRAQ:20061123 Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.  View
215145 22268 CVE-2006-6164 URL:http://www.securityfocus.com/archive/1/archive/1/452428/100/0/threaded  View
215146 22268 CVE-2006-6164 MISC:http://www.matasano.com/log/592/finger-79tcp-mcdonald-dowd-and-schuh-challenge-part-2/  View
215147 22268 CVE-2006-6164 OPENBSD:[3.9] 016: SECURITY FIX: November 19, 2006  View
215148 22268 CVE-2006-6164 URL:http://www.openbsd.org/errata39.html#ldso  View
215149 22268 CVE-2006-6164 OPENBSD:[4.0] 005: SECURITY FIX: November 19, 2006  View
215150 22268 CVE-2006-6164 URL:http://www.openbsd.org/errata.html#ldso  View
215151 22268 CVE-2006-6164 BID:21188  View
215152 22268 CVE-2006-6164 URL:http://www.securityfocus.com/bid/21188  View
215153 22268 CVE-2006-6164 SECTRACK:1017253  View
215154 22268 CVE-2006-6164 URL:http://securitytracker.com/id?1017253  View
215155 22268 CVE-2006-6164 SECUNIA:22993  View
215156 22268 CVE-2006-6164 URL:http://secunia.com/advisories/22993  View
215157 22268 CVE-2006-6164 XF:openbsd-elf-privilege-escalation(30441)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61243 JVNDB-2006-003509 Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 Joomla! (com_jce) 用の Ryan Demmer Joomla Content Editor (JCE) の JCE Admin コンポーネントの jce.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6166 22268 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003509.html  View