Bug 146207 - Information leak with LD_DEBUG
Summary: Information leak with LD_DEBUG
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: glibc
Version: 3
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Jakub Jelinek
QA Contact: Brian Brock
URL: http://www.gentoo.org/security/en/gls...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-01-25 23:32 UTC by Leonard den Ottolander
Modified: 2007-11-30 22:10 UTC (History)
0 users

Fixed In Version: 2.3.3-88
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-01-26 10:08:07 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Leonard den Ottolander 2005-01-25 23:32:45 UTC 
Silvio Cesare discovered a potential information leak in glibc. It
allows LD_DEBUG on SUID binaries where it should not be allowed. This
has various security implications, which may be used to gain
confidentional information.

Has this been caught? Might apply to other releases. If so please
propagate.
Comment 1 Jakub Jelinek 2005-01-26 10:08:07 UTC 
LD_DEBUG as well as LD_TRACE_PRELINKING are disallowed for suid binaries since
glibc-2.3.3-88, FC3 ATM has glibc-2.3.4-2.fc3.
Comment 2 Leonard den Ottolander 2005-01-27 21:32:55 UTC 
Did you propagate this bug report to other relevant releases/OSes? I
would say RHEL 2.1 and 3 are vulnerable...
Comment 3 Leonard den Ottolander 2005-01-27 21:36:04 UTC 
Please CC me on new reports for RHEL if you do propagate this report.
Searched bugzilla for LD_DEBUG in the title of reports and other
titles that might be relevant but I didn't find any. Might be an
oversight on my part.
Note You need to log in before you can comment on or make changes to this bug.