Back to search
CVE-2009-4147
Published: Dec 2, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE, (4) LD_DEBUG, and (5) LD_ELF_HINTS_PATH environment variables, which allows local users to gain privileges by executing a setuid or setguid program with a modified variable containing an untrusted search path that points to a Trojan horse library, different vectors than CVE-2009-4146.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
37154
vdb-entry
x_refsource_BID
20091201 Upcoming FreeBSD Security Advisory
mailing-list
x_refsource_BUGTRAQ
37517
third-party-advisory
x_refsource_SECUNIA
http://people.freebsd.org/~cperciva/rtld.patch
x_refsource_CONFIRM
20091130 ** FreeBSD local r00t zeroday
mailing-list
x_refsource_BUGTRAQ
1023250
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now