PT-2007-5613 · Suse · Suse Linux

Publicado 2007-08-20 · Atualizado 2018-10-30 · CVE-2007-4432

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SUSE Linux versions 10.1 and Enterprise 10

Description The issue is related to an untrusted search path vulnerability in wrapper scripts for certain programs, allowing local users to gain privileges. This can be achieved by modifying the LD LIBRARY PATH and MONO GAC PREFIX environment variables.

Recommendations For SUSE Linux versions 10.1 and Enterprise 10, consider restricting access to the wrapper scripts for the affected programs until a patch is available. As a temporary workaround, avoid using modified LD LIBRARY PATH and MONO GAC PREFIX environment variables to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-4432

Produtos afetados

Suse Linux

Referências · 7

• http://osvdb.org/46781 · Nota
• http://osvdb.org/46782 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4432 · Nota de Segurança
• http://novell.com/linux/security/advisories/2007_17_sr.html · Aviso do Fabricante
• http://secunia.com/advisories/26543 · Nota
• http://osvdb.org/46784 · Nota
• http://osvdb.org/46783 · Nota