NVD

Id
8552  
Name
CVE-2011-1658  
Description
ld.so in the GNU C Library (aka glibc or libc6) 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a (1) setuid or (2) setgid program with this RPATH value, and then executing the program with a crafted value for the LD_PRELOAD environment variable, a different vulnerability than CVE-2010-3847 and CVE-2011-0536. NOTE: it is not expected that any standard operating-system distribution would ship an applicable setuid or setgid program.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-04-08  
Modified Date
2011-10-25  
Seq
2011-1658  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
49222 8552 CVE-2011-1658 http://sourceware.org/bugzilla/show_bug.cgi?id=12393  View
49223 8552 CVE-2011-1658 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
49224 8552 CVE-2011-1658 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
49225 8552 CVE-2011-1658 gnuclibrary-ldso-priv-esc(66820)  View
49226 8552 CVE-2011-1658 https://bugzilla.redhat.com/show_bug.cgi?id=667974  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34222 JVNDB-2011-004464 GNU C Library の ld.so における権限を取得される脆弱性 GNU C Library の ld.so は、RPATH がこのトークン全体を構成している際、$ORIGIN 動的ストリングトークンを拡張するため、 権限を取得される脆弱性が存在します。 CVE-2011-1658 49565 CVE-2011-1658 8552 3.7 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004464.html 2011-04-08 2012-12-18 View