PT-2007-5613 · Suse · Suse Linux

Published 2007-08-20 · Updated 2018-10-30 · CVE-2007-4432

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SUSE Linux versions 10.1 and Enterprise 10

Description The issue is related to an untrusted search path vulnerability in wrapper scripts for certain programs, allowing local users to gain privileges. This can be achieved by modifying the LD LIBRARY PATH and MONO GAC PREFIX environment variables.

Recommendations For SUSE Linux versions 10.1 and Enterprise 10, consider restricting access to the wrapper scripts for the affected programs until a patch is available. As a temporary workaround, avoid using modified LD LIBRARY PATH and MONO GAC PREFIX environment variables to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-4432

Affected Products

Suse Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-4432 · Security Note
• http://novell.com/linux/security/advisories/2007_17_sr.html · Vendor Advisory
• http://osvdb.org/46781 · Note
• http://osvdb.org/46782 · Note
• http://secunia.com/advisories/26543 · Note
• http://osvdb.org/46784 · Note
• http://osvdb.org/46783 · Note