Bug 146207

Summary:	Information leak with LD_DEBUG
Product:	[Fedora] Fedora	Reporter:	Leonard den Ottolander <leonard-rh-bugzilla>
Component:	glibc	Assignee:	Jakub Jelinek <jakub>
Status:	CLOSED ERRATA	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	3	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml
Whiteboard:
Fixed In Version:	2.3.3-88	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-01-26 10:08:07 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Leonard den Ottolander 2005-01-25 23:32:45 UTC

Silvio Cesare discovered a potential information leak in glibc. It
allows LD_DEBUG on SUID binaries where it should not be allowed. This
has various security implications, which may be used to gain
confidentional information.

Has this been caught? Might apply to other releases. If so please
propagate.

Comment 1 Jakub Jelinek 2005-01-26 10:08:07 UTC

LD_DEBUG as well as LD_TRACE_PRELINKING are disallowed for suid binaries since
glibc-2.3.3-88, FC3 ATM has glibc-2.3.4-2.fc3.

Comment 2 Leonard den Ottolander 2005-01-27 21:32:55 UTC

Did you propagate this bug report to other relevant releases/OSes? I
would say RHEL 2.1 and 3 are vulnerable...

Comment 3 Leonard den Ottolander 2005-01-27 21:36:04 UTC

Please CC me on new reports for RHEL if you do propagate this report.
Searched bugzilla for LD_DEBUG in the title of reports and other
titles that might be relevant but I didn't find any. Might be an
oversight on my part.