Vulnerabilities > CVE-2000-0959 - Unspecified vulnerability in GNU Glibc 2.1.3.10

047910
CVSS 1.2 - LOW
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
high complexity
gnu

Summary

glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.

Vulnerable Configurations

Part Description Count
Application
Gnu
1