GNU glibc Dynamic Linker '$ORIGIN' Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	64465
Class:	Design Error
CVE:	CVE-2011-0536
Remote:	No
Local:	Yes
Published:	Apr 08 2011 12:00AM
Updated:	Feb 13 2014 01:07AM
Credit:	The vendor reported these issues.
Vulnerable:	VMWare ESX 4.1 VMWare ESX 4.0 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux EUS 5.6.z server Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server GNU glibc 0 Avaya 96x1 IP Deskphone 6.2 Avaya 96x1 IP Deskphone 6
Not Vulnerable:

GNU glibc Dynamic Linker '$ORIGIN' Multiple Local Privilege Escalation Vulnerabilities

The GNU C library (GNU glibc) is prone to multiple local privilege-escalation vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of setuid applications using the affected library. This may allow the attacker to gain elevated privileges and fully compromise the affected system.

Note: These issues are the result of an incomplete fix for the issue described in BID 44154 (GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability).

GNU glibc Dynamic Linker '$ORIGIN' Multiple Local Privilege Escalation Vulnerabilities

An attacker may exploit these issues using commonly available tools.

GNU glibc Dynamic Linker '$ORIGIN' Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GNU glibc Dynamic Linker '$ORIGIN' Multiple Local Privilege Escalation Vulnerabilities

References:

• GNU C Library Homepage (GNU)