NetSight
IP …
low2.1Public exploit code

CVE-2001-0169

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.

Affected products

VendorProductAffected versions
MandrakesoftMandrake Linux
Versions 6.0, 6.1, 7.0, 7.1, 7.2
MandrakesoftMandrake Linux Corporate Server
Version 1.0.1
RedhatLinux
Versions 6.0, 6.1, 6.2
TrustixSecure Linux
Versions 1.1, 1.2
TurbolinuxTurbolinux
through 6.0.5
Version 6.1

References