GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
BID:64469
Info
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
| Bugtraq ID: | 64469 |
| Class: | Design Error |
| CVE: |
CVE-2011-1658 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 01 2011 12:00AM |
| Updated: | Feb 13 2014 12:26AM |
| Credit: | Vincent Danen |
| Vulnerable: |
GNU glibc 2.12.2 GNU glibc 2.12.1 GNU glibc 2.11.2 GNU glibc 2.11.1 GNU glibc 2.10.1 GNU glibc 2.5 GNU glibc 2.3.10 GNU glibc 2.3.4 GNU glibc 2.3.3 GNU glibc 2.3.2 GNU glibc 2.3.1 GNU glibc 2.3 GNU glibc 2.2.5 GNU glibc 2.2.4 GNU glibc 2.2.3 GNU glibc 2.2.2 GNU glibc 2.2.1 GNU glibc 2.2 GNU glibc 2.1.9 GNU glibc 2.1.3 GNU glibc 2.1.2 GNU glibc 2.1.1 GNU glibc 2.1 GNU glibc 2.0.6 GNU glibc 2.0.5 GNU glibc 2.0.4 GNU glibc 2.0.3 GNU glibc 2.0.2 GNU glibc 2.0.1 GNU glibc 2.0 GNU glibc 2.7 GNU glibc 2.13 GNU Cfengine 1.2.3 Avaya 96x1 IP Deskphone 6.2 Avaya 96x1 IP Deskphone 6 |
| Not Vulnerable: | |
Discussion
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
The GNU C library (GNU glibc) is prone to a local privilege-escalation vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of setuid applications using the affected library. This may allow the attacker to gain superuser privileges and fully compromise the affected system.
The GNU C library (GNU glibc) is prone to a local privilege-escalation vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of setuid applications using the affected library. This may allow the attacker to gain superuser privileges and fully compromise the affected system.
Exploit / POC
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
An attacker may exploit this issue using commonly available tools.
An attacker may exploit this issue using commonly available tools.
Solution / Fix
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
References:
References:
- GNU C Library Homepage (GNU)