Title: glibc LD_PRELOAD File Overwriting Vulnerability
Severity: MODERATE
Description:
glibc is the GNU C Library, a freely available, open source C library maintained by public domain, and distributed by the Free Software Foundation. It is included in most current Linux distributions.
A problem with the library could allow access to write or overwrite restricted files. Upon execution of SUID and SGID applications, the library allows a user to preload libraries in the environment variable LD_PRELOAD providing the variable does not contain forward slashes. A special check is also performed to ensure the library being preloaded is SUID. However, if the library is found in the /etc/ld.so.cache file, this check is circumvented, and never performed. It is therefore possible to load a library from /lib or /usr/lib prior to the execution of a SUID or SGID program. This flaw makes it possible for a user with malicious motives to create files in restricted locations, or overwrite files outside of the access of this user, including system files.
Affected Products:
- Debian Linux 2.2.0
- Debian Linux 2.2.0 68k
- Debian Linux 2.2.0 alpha
- Debian Linux 2.2.0 arm
- Debian Linux 2.2.0 powerpc
- Debian Linux 2.2.0 sparc
- MandrakeSoft Corporate Server 1.0.1
- MandrakeSoft Linux Mandrake 6.0.0
- MandrakeSoft Linux Mandrake 6.1.0
- MandrakeSoft Linux Mandrake 7.0.0
- MandrakeSoft Linux Mandrake 7.1.0
- MandrakeSoft Linux Mandrake 7.2.0
- RedHat Linux 6.0.0
- RedHat Linux 6.0.0 alpha
- RedHat Linux 6.0.0 sparc
- RedHat Linux 6.1.0
- RedHat Linux 6.1.0 alpha
- RedHat Linux 6.1.0 i386
- RedHat Linux 6.1.0 sparc
- RedHat Linux 6.2.0
- RedHat Linux 6.2.0 alpha
- RedHat Linux 6.2.0 i386
- RedHat Linux 6.2.0 sparc
- RedHat glibc-2.1.1-6.i386.rpm 0.0.0
- RedHat glibc-2.1.2-11.i386.rpm 0.0.0
- RedHat glibc-2.1.3-15.i386.rpm 0.0.0
- RedHat glibc-devel-2.1.1-6.i386.rpm 0.0.0
- RedHat glibc-devel-2.1.2-11.i386.rpm 0.0.0
- RedHat glibc-devel-2.1.3-15.i386.rpm 0.0.0
- RedHat glibc-profile-2.1.1-6.i386.rpm 0.0.0
- RedHat glibc-profile-2.1.2-11.i386.rpm 0.0.0
- RedHat glibc-profile-2.1.3-15.i386.rpm 0.0.0
- RedHat nscd-2.1.1-6.i386.rpm 0.0.0
- RedHat nscd-2.1.2-11.i386.rpm 0.0.0
- RedHat nscd-2.1.3-15.i386.rpm 0.0.0
- Trustix Secure Linux 1.1.0
- Trustix Secure Linux 1.2.0
- Turbolinux Turbolinux 6.0.5
- Turbolinux Turbolinux 6.1.0
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
