glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink…
提示
摘要
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- http://www.securityfocus.com/archive/1/85028
- http://www.securityfocus.com/bid/1719 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5299
- http://www.securityfocus.com/archive/1/85028
- http://www.securityfocus.com/bid/1719 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5299
时间线
- nvd_ingest NVD