NVD

Id
15183  
Name
CVE-2010-3847  
Description
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-07  
Modified Date
2016-12-06  
Seq
2010-3847  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85324 15183 CVE-2010-3847 20101018 The GNU C library dynamic linker expands $ORIGIN in setuid library search path  View
85325 15183 CVE-2010-3847 20101019 Re: The GNU C library dynamic linker expands $ORIGIN in setuid library search path  View
85326 15183 CVE-2010-3847 20101020 Re: The GNU C library dynamic linker expands $ORIGIN in setuid library search path  View
85327 15183 CVE-2010-3847 GLSA-201011-01  View
85328 15183 CVE-2010-3847 [libc-hacker] 20101018 [PATCH] Never expand $ORIGIN in privileged programs  View
85329 15183 CVE-2010-3847 http://support.avaya.com/css/P8/documents/100120941  View
85330 15183 CVE-2010-3847 DSA-2122  View
85331 15183 CVE-2010-3847 VU#537223  View
85332 15183 CVE-2010-3847 MDVSA-2010:207  View
85333 15183 CVE-2010-3847 RHSA-2010:0872  View
85334 15183 CVE-2010-3847 20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap  View
85335 15183 CVE-2010-3847 44154  View
85336 15183 CVE-2010-3847 USN-1009-1  View
85337 15183 CVE-2010-3847 http://www.vmware.com/security/advisories/VMSA-2011-0001.html  View
85338 15183 CVE-2010-3847 ADV-2011-0025  View
85339 15183 CVE-2010-3847 https://bugzilla.redhat.com/show_bug.cgi?id=643306  View
85340 15183 CVE-2010-3847 SUSE-SA:2010:052  View
85341 15183 CVE-2010-3847 RHSA-2010:0787  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36519 JVNDB-2010-002299 glibc に権限昇格の脆弱性 glibc には、権限昇格の脆弱性が存在します。 CVE-2010-3847 46427 CVE-2010-3847 15183 N/A http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002299.html 2010-10-26 2011-01-14 View