CVE-2009-5064

N/A

Description

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.

CVE Details

CVSS v3.1 ScoreN/A

Published3/30/2011

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

gnu:glibc

Weaknesses (CWE)

CWE-264

References

http://openwall.com/lists/oss-security/2011/03/07/10(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/07/13(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/07/7(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/08/1(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/08/10(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/08/2(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/08/3(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/08/7(cve@mitre.org)

http://reverse.lostrealm.com/protect/ldd.html(cve@mitre.org)

http://www.catonmat.net/blog/ldd-arbitrary-code-execution/(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2011-1526.html(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=531160(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=682998(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/07/10(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/07/13(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/07/7(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/08/1(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/08/10(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/08/2(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/08/3(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2011/03/08/7(af854a3a-2127-422b-91ae-364da2661108)

http://reverse.lostrealm.com/protect/ldd.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.catonmat.net/blog/ldd-arbitrary-code-execution/(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2011-1526.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=531160(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=682998(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.