PT-2006-6798 · Openbsd · Openbsd

Publicado 2006-11-29 · Atualizado 2018-10-17 · CVE-2006-6164

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD versions 3.9 through 4.0

Description The issue is related to the dl unsetenv function in loader.c in the ELF ld.so, which does not properly remove duplicate environment variables. This allows local users to pass dangerous variables, such as LD PRELOAD, to loading processes. This could potentially be leveraged to gain privileges.

Recommendations For OpenBSD versions 3.9 through 4.0, consider restricting the use of the LD PRELOAD variable to minimize the risk of exploitation. As a temporary workaround, avoid using the LD PRELOAD variable in sensitive environments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6164

Produtos afetados

Openbsd

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/30441 · Nota
• http://securityfocus.com/bid/21188 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6164 · Nota de Segurança
• http://securityfocus.com/archive/1/452371/100/0/threaded · Nota
• http://securitytracker.com/id?1017253 · Correção
• http://openbsd.org/errata.html#ldso · Correção, Aviso do Fabricante
• http://securityfocus.com/archive/1/452428/100/0/threaded · Nota
• http://secunia.com/advisories/22993 · Nota
• http://openbsd.org/errata39.html#ldso · Correção, Aviso do Fabricante
• http://matasano.com/log/592/finger-79tcp-mcdonald-dowd-and-schuh-challenge-part-2 · Nota