CVE

Id
42499  
CVE No.
CVE-2009-5064  
Status
Candidate  
Description
** DISPUTED ** ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc."  
Phase
Assigned (20110330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
463016 42499 CVE-2009-5064 MLIST:[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
463017 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/07/7  View
463018 42499 CVE-2009-5064 MLIST:[oss-security] 20110307 Re: CVE Request -- logrotate -- nine issues  View
463019 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/07/10  View
463020 42499 CVE-2009-5064 MLIST:[oss-security] 20110307 Re: ldd can execute an app unexpectedly  View
463021 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/08/2  View
463022 42499 CVE-2009-5064 MLIST:[oss-security] 20110307 ldd can execute an app unexpectedly  View
463023 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/07/13  View
463024 42499 CVE-2009-5064 MLIST:[oss-security] 20110308 Re: ldd can execute an app unexpectedly  View
463025 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/08/1  View
463026 42499 CVE-2009-5064 MLIST:[oss-security] 20110308 Re: ldd can execute an app unexpectedly  View
463027 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/08/3  View
463028 42499 CVE-2009-5064 MLIST:[oss-security] 20110308 Re: ldd can execute an app unexpectedly  View
463029 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/08/7  View
463030 42499 CVE-2009-5064 MLIST:[oss-security] 20110308 Re: ldd can execute an app unexpectedly  View
463031 42499 CVE-2009-5064 URL:http://openwall.com/lists/oss-security/2011/03/08/10  View
463032 42499 CVE-2009-5064 MISC:http://reverse.lostrealm.com/protect/ldd.html  View
463033 42499 CVE-2009-5064 MISC:http://www.catonmat.net/blog/ldd-arbitrary-code-execution/  View
463034 42499 CVE-2009-5064 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=531160  View
463035 42499 CVE-2009-5064 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=682998  View
463036 42499 CVE-2009-5064 REDHAT:RHSA-2011:1526  View

Related JVN