Beveiligingsadvies

CVE-2001-0169

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2001-05-07 04:00:00

Laatst bijgewerkt 2024-08-08 04:06:55

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.

← Alle CVE's bekijken Bekijk op cve.org ↗