NVD

Id
7596  
Name
CVE-2011-0536  
Description
Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka glibc or libc6), including glibc-2.5-49.el5_5.6 and glibc-2.12-1.7.el6_0.3 in Red Hat Enterprise Linux, allow local users to gain privileges via a crafted dynamic shared object (DSO) in a subdirectory of the current working directory during execution of a (1) setuid or (2) setgid program that has $ORIGIN in (a) RPATH or (b) RUNPATH within the program itself or a referenced library. NOTE: this issue exists because of an incorrect fix for CVE-2010-3847.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-08  
Modified Date
2012-01-26  
Seq
2011-0536  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42867 7596 CVE-2011-0536 DSA-2122-2  View
42868 7596 CVE-2011-0536 [oss-security] 20110203 CVE request: glibc CVE-2010-3847 fix regression  View
42869 7596 CVE-2011-0536 [oss-security] 20110203 Re: CVE request: glibc CVE-2010-3847 fix regression  View
42870 7596 CVE-2011-0536 oval:org.mitre.oval:def:13086  View
42871 7596 CVE-2011-0536 1025289  View
42872 7596 CVE-2011-0536 http://sourceware.org/git/?p=glibc.git;a=commit;h=96611391ad8823ba58405325d78cefeae5cdf699  View
42873 7596 CVE-2011-0536 MDVSA-2011:178  View
42874 7596 CVE-2011-0536 RHSA-2011:0412  View
42875 7596 CVE-2011-0536 RHSA-2011:0413  View
42876 7596 CVE-2011-0536 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
42877 7596 CVE-2011-0536 USN-1009-2  View
42878 7596 CVE-2011-0536 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
42879 7596 CVE-2011-0536 ADV-2011-0863  View
42880 7596 CVE-2011-0536 https://bugzilla.redhat.com/show_bug.cgi?id=667974  View
42881 7596 CVE-2011-0536 https://launchpad.net/bugs/701783  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31208 JVNDB-2011-001448 GNU C Library の elf/dl-object.c における権限を取得される脆弱性 GNU C Library (glibc or libc6) の elf/dl-object.c は、RPATH/RUNPATH 内の $ORIGIN に関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2011-0536 48443 CVE-2011-0536 7596 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001448.html 2011-04-04 2012-12-18 View