SUSE LD Insecure RPATH / RUNPATH Arbitrary Code Execution Vulnerability

Bugtraq ID:	16581
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 10 2006 12:00AM
Updated:	Feb 10 2006 09:18PM
Credit:	Reported by the vendor.
Vulnerable:	S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0
Not Vulnerable:

SUSE LD Insecure RPATH / RUNPATH Arbitrary Code Execution Vulnerability


SUSE LD is susceptible to an insecure RPATH / RUNPATH vulnerability.

This issue can allow attackers to place malicious libraries in a directory and to trick users to execute an application from that directory, which would be dynamically linked at run time when the application is executed. This would result in the execution of arbitrary code with the privileges of a user that executes the application.

Note that this issue is specific to SUSE.

SUSE LD Insecure RPATH / RUNPATH Arbitrary Code Execution Vulnerability

An exploit is not required.

SUSE LD Insecure RPATH / RUNPATH Arbitrary Code Execution Vulnerability

Solution:

The vendor has released an advisory and fixes to address this issue.

SUSE LD Insecure RPATH / RUNPATH Arbitrary Code Execution Vulnerability

References: