ROOT 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	44362
Class:	Design Error
CVE:	CVE-2010-3376
Remote:	No
Local:	Yes
Published:	Sep 28 2010 12:00AM
Updated:	Sep 28 2010 12:00AM
Credit:	Raphael Geissert
Vulnerable:	The ROOT Team ROOT 5.18/00
Not Vulnerable:

ROOT 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities

ROOT is prone to multiple local privilege-escalation vulnerabilities.

An attacker could exploit these issues by enticing an unsuspecting victim to run an application in a directory containing a malicious library file with a specific name. Exploiting these issues allow local attackers to execute arbitrary code with the privileges of the user running the affected application.

ROOT 5.18.00 is vulnerable; other versions may also be affected.

ROOT 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities

An attacker may exploit these issues using commonly available tools.

ROOT 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

ROOT 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities

References:

• Debian Bug report logs - #598419 - root-system-proofd: CVE-2010-3376: insecure l (Raphael Geissert)
  
• Debian Bug report logs - #598420 - root-system-xrootd: CVE-2010-3376: insecure l (Raphael Geissert)
  
• ROOT - Homepage (The ROOT Team)