CVE

Id
9881  
CVE No.
CVE-2004-1453  
Status
Candidate  
Description
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.  
Phase
Assigned (20050213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67480 9881 CVE-2004-1453 GENTOO:GLSA-200408-16  View
67481 9881 CVE-2004-1453 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml  View
67482 9881 CVE-2004-1453 MISC:http://bugs.gentoo.org/show_bug.cgi?id=59526  View
67483 9881 CVE-2004-1453 REDHAT:RHSA-2005:256  View
67484 9881 CVE-2004-1453 URL:http://www.redhat.com/support/errata/RHSA-2005-256.html  View
67485 9881 CVE-2004-1453 REDHAT:RHSA-2005:261  View
67486 9881 CVE-2004-1453 URL:http://www.redhat.com/support/errata/RHSA-2005-261.html  View
67487 9881 CVE-2004-1453 BID:10963  View
67488 9881 CVE-2004-1453 URL:http://www.securityfocus.com/bid/10963  View
67489 9881 CVE-2004-1453 OVAL:oval:org.mitre.oval:def:10762  View
67490 9881 CVE-2004-1453 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10762  View
67491 9881 CVE-2004-1453 SECUNIA:12306  View
67492 9881 CVE-2004-1453 URL:http://secunia.com/advisories/12306  View
67493 9881 CVE-2004-1453 XF:glibc-suid-info-disclosure(17006)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62987 JVNDB-2004-000329 Cisco IOS の不正な OSPF パケットの解析によるサービス運用妨害 (DoS) の脆弱性 Cisco IOS には、OSPF パケットの処理が適切に行われない不備が存在するため、OSPF プロトコルを有効にしている場合に、不正な OSPF パケットを解釈することでデバイスが再起動してしまう脆弱性が存在します。 CVE-2004-1454 9881 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000329.html  View