GNU glibc 'TZ' Variable Arbitrary File Read Vulnerability
BID:70596
Info
GNU glibc 'TZ' Variable Arbitrary File Read Vulnerability
| Bugtraq ID: | 70596 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 16 2014 12:00AM |
| Updated: | Oct 16 2014 12:00AM |
| Credit: | Jakub Wilk |
| Vulnerable: |
GNU glibc2 2.3.10 GNU glibc 2.12.2 GNU glibc 2.12.1 GNU glibc 2.11.2 GNU glibc 2.11.1 GNU glibc 2.10.1 GNU glibc 2.5 GNU glibc 2.3.10 GNU glibc 2.3.4 GNU glibc 2.3.3 GNU glibc 2.3.2 GNU glibc 2.3.1 GNU glibc 2.3 GNU glibc 2.2.5 GNU glibc 2.2.4 GNU glibc 2.2.3 GNU glibc 2.2.2 GNU glibc 2.2.1 GNU glibc 2.2 GNU glibc 2.1.9 and Greater GNU glibc 2.1.9 GNU glibc 2.1.3 -10 GNU glibc 2.1.3 GNU glibc 2.1.2 GNU glibc 2.1.1 -6 GNU glibc 2.1.1 GNU glibc 2.1 GNU glibc 2.0.6 GNU glibc 2.0.5 GNU glibc 2.0.4 GNU glibc 2.0.3 GNU glibc 2.0.2 GNU glibc 2.0.1 GNU glibc 2.0 GNU glibc 2.9 GNU glibc 2.8 GNU glibc 2.7 GNU glibc 2.6.1 GNU glibc 2.6 GNU glibc 2.5.1 GNU glibc 2.5 GNU glibc 2.4 GNU glibc 2.3.6 GNU glibc 2.3.5 GNU glibc 2.20 GNU glibc 2.19 GNU glibc 2.18 GNU glibc 2.17 GNU glibc 2.16 GNU glibc 2.15 GNU glibc 2.14.1 GNU glibc 2.14 GNU glibc 2.13 GNU glibc 2.12 GNU glibc 2.11.3 GNU glibc 2.11 GNU glibc 0 GNU Cfengine 1.2.3 |
| Not Vulnerable: | |
Exploit / POC
GNU glibc 'TZ' Variable Arbitrary File Read Vulnerability
An attacker can use standard commands to exploit this issue. The following example is available: $ TZ=$PWD/tz sudo -u root strace -e read date
An attacker can use standard commands to exploit this issue. The following example is available: $ TZ=$PWD/tz sudo -u root strace -e read date
Solution / Fix
GNU glibc 'TZ' Variable Arbitrary File Read Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
GNU glibc 'TZ' Variable Arbitrary File Read Vulnerability
References:
References:
- glibc Homepage (GNU)
- Abusing TZ for fun (and little profit) (SecLists.Org)