ember 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

Bugtraq ID:	44341
Class:	Input Validation Error
CVE:	CVE-2010-3355
Remote:	No
Local:	Yes
Published:	Sep 28 2010 12:00AM
Updated:	Apr 16 2015 05:50PM
Credit:	Raphael Geissert
Vulnerable:
Not Vulnerable:

ember 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

ember is prone to a local privilege-escalation vulnerability.

An attacker could exploit this issue by enticing an unsuspecting victim to run an application in a directory containing a malicious library file with a specific name. Exploiting this issue allows local attackers to execute arbitrary code with the privileges of the user running the affected application.

ember 0.5.7 is vulnerable; other versions may also be affected.

ember 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

An attacker may exploit this issue using commonly available tools.

ember 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ember 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

References:

• #598288 ember: CVE-2010-3355: insecure library loading (Debian)
  
• Product Homepage (ember)