PT-2010-4773 · Cern · Root

Raphael Geissert

·

Publicado

2010-10-20

·

Atualizado

2010-10-21

·

CVE-2010-3376

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ROOT versions 5.18/00
Description The issue concerns the proofserv, xrdcp, xrdpwdadmin, and xrd scripts in ROOT, which place a zero-length directory name in the LD LIBRARY PATH. This allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Recommendations For ROOT version 5.18/00, consider restricting access to the LD LIBRARY PATH environment variable to prevent unauthorized modifications, and avoid using the proofserv, xrdcp, xrdpwdadmin, and xrd scripts until a patch is available. As a temporary workaround, consider setting the LD LIBRARY PATH to a known safe value before executing these scripts.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2010-3376

Produtos afetados

Root