BID:15040

SUSE Linux Multiple Local Privilege Escalation Vulnerabilities

Info

SUSE Linux Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	15040
Class:	Design Error
CVE:	CVE-2005-4791
Remote:	No
Local:	Yes
Published:	Oct 07 2005 12:00AM
Updated:	Nov 22 2007 05:04PM
Credit:	The vendor has released this vulnerability.
Vulnerable:	S.u.S.E. tomboy 10.0 S.u.S.E. tomboy 9.3 S.u.S.E. liferea 10.0 S.u.S.E. blam 10.0 S.u.S.E. blam 9.3 S.u.S.E. beagle 10.0 S.u.S.E. beagle 9.3 S.u.S.E. banshee 10.0 Liferea Liferea 1.4.7 Liferea Liferea 1.4.6 Liferea Liferea 1.4.5 Liferea Liferea 1.4.4 Liferea Liferea 1.4.3 Liferea Liferea 1.4.2 Liferea Liferea 1.4.1 Liferea Liferea 1.4 Liferea Liferea 1.2.23 Liferea Liferea 1.2.22 Liferea Liferea 1.2.21 Liferea Liferea 1.2.20 Liferea Liferea 1.2.19 Liferea Liferea 1.2.18 Liferea Liferea 1.2.17 Liferea Liferea 1.2.16 Liferea Liferea 1.2.15 Liferea Liferea 1.2.14 Liferea Liferea 1.2.13 Liferea Liferea 1.2.12 Liferea Liferea 1.2.11 Liferea Liferea 1.2.10 Liferea Liferea 1.2.9 Liferea Liferea 1.2.8 Liferea Liferea 1.2.7 Liferea Liferea 1.2.6 Liferea Liferea 1.2.5 Liferea Liferea 1.2.4 Liferea Liferea 1.2.3 Liferea Liferea 1.2.2 Liferea Liferea 1.2.1 Liferea Liferea 1.2 Liferea Liferea 1.0.27 Liferea Liferea 1.0.26 Liferea Liferea 1.0.25 Liferea Liferea 1.0.24 Liferea Liferea 1.0.23 Liferea Liferea 1.0.22 Liferea Liferea 1.0.21 Liferea Liferea 1.0.20 Liferea Liferea 1.0.19 Liferea Liferea 1.0.18 Liferea Liferea 1.0.17 Liferea Liferea 1.0.16 Liferea Liferea 1.0.15 Liferea Liferea 1.0.14 Liferea Liferea 1.0.13 Liferea Liferea 1.0.12 Liferea Liferea 1.0.11 Liferea Liferea 1.0.10 Liferea Liferea 1.0.9 Liferea Liferea 1.0.8 Liferea Liferea 1.0.7 Liferea Liferea 1.0.6 Liferea Liferea 1.0.5 Liferea Liferea 1.0.4 Liferea Liferea 1.0.3 Liferea Liferea 1.0.2 Liferea Liferea 1.0.1 Liferea Liferea 1.4.5b Liferea Liferea 1.4.3b Liferea Liferea 1.2.6b Liferea Liferea 1.2.12b Liferea Liferea 1.2.10c Liferea Liferea 1.2.10b Liferea Liferea 1.0

Not Vulnerable:

Discussion

SUSE Linux Multiple Local Privilege Escalation Vulnerabilities

Multiple SUSE Linux applications are prone to a local privilege-escalation vulnerability because affected binaries handle the 'LD_LIBRARY_PATH' variable in an unsafe manner.

A local attacker may exploit this vulnerability to execute arbitrary code in shared libraries in the context of a user that runs the affected application.

Other unspecified packages are affected; if these other packages contain setuid-superuser privileges, then local escalation of privileges may be possible.

Exploit / POC

SUSE Linux Multiple Local Privilege Escalation Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Solution / Fix

SUSE Linux Multiple Local Privilege Escalation Vulnerabilities

Solution:
SUSE Linux has released Security Summary Report SUSE-SR:2005:022 addressing this and other issues. Please see the referenced advisory for more information.

Liferea Liferea 1.2.6b