Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade sblim-cmpi-fsvol-testUpgrade sblim-cmpi-samba-testUpgrade sblim-cmpi-fsvol-develUpgrade sblim-cmpi-develUpgrade sblim-cmpi-syslog-testUpgrade sblim-cmpi-sambaUpgrade sblim-gatherUpgrade sblim-cmpi-nfsv4-testUpgrade sblim-cmpi-params-testUpgrade sblim-testsuiteUpgrade sblim-wbemcliUpgrade sblim-cmpi-nfsv4Upgrade sblim-cmpi-fsvolUpgrade sblim-cmpi-samba-develUpgrade sblim-cmpi-dns-develUpgrade sblim-cmpi-base-testUpgrade sblim-tools-libra-develUpgrade sblim-cmpi-networkUpgrade sblim-cmpi-paramsUpgrade sblim-cmpi-sysfsUpgrade sblim-cim-client-manualUpgrade sblim-cmpi-nfsv3-testUpgrade sblim-cim-clientUpgrade sblim-cmpi-network-develUpgrade sblim-gather-develUpgrade sblim-cmpi-dnsUpgrade sblim-cmpi-nfsv3Upgrade sblim-cim-client-javadocUpgrade sblim-cmpi-base-develUpgrade sblim-cmpi-syslogUpgrade sblim-cmpi-baseUpgrade sblim-tools-libraUpgrade sblim-cmpi-sysfs-testUpgrade sblim-cmpi-dns-testUpgrade sblim-cmpi-network-testUpgrade sblim-gather-testUpgrade sblim-gather-provider | Oct 16, 2024 | Jun 25, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub