Title: glibc RESOLV_HOST_CONF File Read Access Vulnerability
Severity: MODERATE
Description:
glibc is the C Library distributed with most implementations of the Linux Operating System. It is freely available through the Free Software Foundation, and publicly maintained.
A problem in versions of glibc 2.1.9 and greater allow a local user access to restricted files. A typo in the glibc source creates a situation of insufficent validation and clearing of the environment variable RESOLV_HOST_CONF, a controlled environment variable that is normally cleared when suid/sgid programs are executed. Therefore, it is possible for a local user to set this environment variable to a sensitive system file and gain read privileges to the file. This vulnerability makes it possible for a user with malicious intent to read the shadow file, and gain access to encrypted passwords. Successful exploitation of this vulnerability could lead to compromise of system accounts, elevated privileges, and potentially administrative access.
Affected Products:
- Conectiva Linux 4.0.0
- Conectiva Linux 4.0.0 es
- Conectiva Linux 4.1.0
- Conectiva Linux 4.2.0
- Conectiva Linux 5.0.0
- Conectiva Linux 5.1.0
- Conectiva Linux 6.0.0
- Conectiva Linux ecommerce
- Conectiva Linux graficas
- Debian Linux 2.3.0
- RedHat Linux 7.0.0
- RedHat Linux 7.0.0 alpha
- RedHat Linux 7.0.0 i386
- RedHat glibc-2.1.92-14.i386.rpm 0.0.0
- RedHat glibc-2.1.92-14.i686.rpm 0.0.0
- RedHat glibc-devel-2.1.92-14.i386.rpm 0.0.0
- RedHat glibc-profile-2.1.92-14.i386.rpm 0.0.0
- RedHat nscd-2.1.92-14.i386.rpm 0.0.0
- Terra Soft Solutions Yellow Dog Linux 2.0.0
- WireX Immunix OS 7.0.0 -Beta
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
