LTTng Project UST Userspace Tracer 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

Bugtraq ID:	44366
Class:	Input Validation Error
CVE:	CVE-2010-3386
Remote:	No
Local:	Yes
Published:	Sep 28 2010 12:00AM
Updated:	Sep 28 2010 12:00AM
Credit:	Raphael Geissert
Vulnerable:
Not Vulnerable:

LTTng Project UST Userspace Tracer 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

UST Userspace Tracer is prone to a local privilege-escalation vulnerability.

An attacker could exploit this issue by enticing an unsuspecting victim to run an application in a directory containing a malicious library file with a specific name. Exploiting this issue allows local attackers to execute arbitrary code with the privileges of the user running the affected application.

Userspace Tracer 0.7 is vulnerable; other versions may also be affected.

LTTng Project UST Userspace Tracer 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

LTTng Project UST Userspace Tracer 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability

References:

• Debian Bug report logs - #598309 - ust-bin: CVE-2010-3386: insecure library load (Raphael Geissert)
  
• UST Userspace Tracer - Homepage (LTTng Project)