CVE

Id
2990  
CVE No.
CVE-2001-0169  
Status
Entry  
Description
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
12336 2990 CVE-2001-0169 MANDRAKE:MDKSA-2001:012  View
12337 2990 CVE-2001-0169 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-012.php3?dis=7.2  View
12338 2990 CVE-2001-0169 SUSE:SuSE-SA:2001:01  View
12339 2990 CVE-2001-0169 URL:http://www.novell.com/linux/security/advisories/2001_001_glibc_txt.html  View
12340 2990 CVE-2001-0169 CALDERA:CSSA-2001-007  View
12341 2990 CVE-2001-0169 URL:http://www.calderasystems.com/support/security/advisories/CSSA-2001-007.0.txt  View
12342 2990 CVE-2001-0169 REDHAT:RHSA-2001:002  View
12343 2990 CVE-2001-0169 URL:http://www.redhat.com/support/errata/RHSA-2001-002.html  View
12344 2990 CVE-2001-0169 DEBIAN:DSA-039  View
12345 2990 CVE-2001-0169 URL:http://www.debian.org/security/2001/dsa-039  View
12346 2990 CVE-2001-0169 TURBO:TLSA2000021-2  View
12347 2990 CVE-2001-0169 URL:http://archives.neohapsis.com/archives/linux/turbolinux/2001-q1/0004.html  View
12348 2990 CVE-2001-0169 BUGTRAQ:20010121 Trustix Security Advisory - glibc  View
12349 2990 CVE-2001-0169 URL:http://www.securityfocus.com/archive/1/157650  View
12350 2990 CVE-2001-0169 BID:2223  View
12351 2990 CVE-2001-0169 URL:http://www.securityfocus.com/bid/2223  View
12352 2990 CVE-2001-0169 XF:linux-glibc-preload-overwrite  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64030 JVNDB-2001-000004 glibc におけるファイルを上書きされる脆弱性 glibc には、アプリケーションが実行される際にロードされるライブラリが /etc/ld.so.cache である場合、setuid ビットが設定されているかどうかチェックしない脆弱性が存在します。 CVE-2001-0169 2990 2.1 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000004.html  View