EDB-15274
functionalGNU C library dynamic linker - '$ORIGIN' Expansion
view exploit source exploit_dbverifiedtype localauthor Tavis Ormandypublished 2010-10-18catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-0536US | medium6.9 | Exploit | ||
Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka glibc or libc6), including glibc-2.5-49.el5_5.6 and glibc-2… | ||||
| CVE-2010-3847US | medium6.9 | Exploit | ||
elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan