low1.2
CVE-2000-0959
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow loca…
Impact
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Glibc | Version 2.1.3.10 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/85028
- http://www.securityfocus.com/bid/1719
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5299
- http://www.securityfocus.com/archive/1/85028
- http://www.securityfocus.com/bid/1719
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5299