NVD

Id
77058  
Name
CVE-2000-0824  
Description
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2000-11-14  
Modified Date
2016-10-17  
Seq
2000-0824  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
387515 77058 CVE-2000-0824 20000902 Conectiva Linux Security Announcement - glibc  View
387516 77058 CVE-2000-0824 20000905 Conectiva Linux Security Announcement - glibc  View
387517 77058 CVE-2000-0824 20000906 [slackware-security]: glibc 2.1.3 vulnerabilities patched  View
387518 77058 CVE-2000-0824 19990917 A few bugs...  View
387519 77058 CVE-2000-0824 CSSA-2000-028.0  View
387520 77058 CVE-2000-0824 20000902 glibc: local root exploit  View
387521 77058 CVE-2000-0824 MDKSA-2000:040  View
387522 77058 CVE-2000-0824 MDKSA-2000:045  View
387523 77058 CVE-2000-0824 20000924 glibc locale security problem  View
387524 77058 CVE-2000-0824 RHSA-2000:057  View
387525 77058 CVE-2000-0824 20000831 glibc unsetenv bug  View
387526 77058 CVE-2000-0824 1639  View
387527 77058 CVE-2000-0824 648  View
387528 77058 CVE-2000-0824 TLSA2000020-1  View
387529 77058 CVE-2000-0824 glibc-ld-unsetenv  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64282 JVNDB-2000-000062 glib の unsetenv() 関数における任意のコマンドを実行される脆弱性 glibc の unsetenv() 関数には、呼び出された際に重複している環境変数を除去しない脆弱性が存在します。 CVE-2000-0824 2393 CVE-2000-0824 77058 7.2 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000062.html 2000-08-31 2007-04-01 View