CVE

Id
22269  
CVE No.
CVE-2006-6165  
Status
Candidate  
Description
** DISPUTED ** ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is the responsibility of the application to properly sanitize the environment.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215158 22269 CVE-2006-6165 BUGTRAQ:20061122 Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.  View
215159 22269 CVE-2006-6165 URL:http://www.securityfocus.com/archive/1/archive/1/452371/100/0/threaded  View
215160 22269 CVE-2006-6165 BUGTRAQ:20061123 Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.  View

Related JVN