The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability (sblim) libraries before 1-13a.el4_6.1 in Red Hat Enterprise Linux (RHEL) 4, and before 1-31.el5_2.1 in RHEL 5, allows local users to gain privileges via a malicious library in a certain subdirectory of /var/tmp, related to an incorrect RPATH setting, as demonstrated by a malicious libc.so library for tog-pegasus.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade sblim-gather-develUpgrade sblim-cmpi-dnsUpgrade sblim-cim-client-javadocUpgrade sblim-cmpi-nfsv3Upgrade sblim-gather-testUpgrade sblim-gather-providerUpgrade sblim-cmpi-sysfs-testUpgrade sblim-cmpi-nfsv3-testUpgrade sblim-cmpi-base-develUpgrade sblim-cmpi-baseUpgrade sblim-cim-clientUpgrade sblim-cmpi-dns-testUpgrade sblim-tools-libraUpgrade sblim-cmpi-network-develUpgrade sblim-cmpi-syslogUpgrade sblim-cmpi-network-testUpgrade sblim-cmpi-paramsUpgrade sblim-cmpi-sysfsUpgrade sblim-cmpi-networkUpgrade sblim-cmpi-base-testUpgrade sblim-cmpi-nfsv4Upgrade sblim-gatherUpgrade sblim-testsuiteUpgrade sblim-cmpi-fsvolUpgrade sblim-cmpi-params-testUpgrade sblim-cmpi-develUpgrade sblim-cim-client-manualUpgrade sblim-cmpi-dns-develUpgrade sblim-tools-libra-develUpgrade sblim-cmpi-syslog-testUpgrade sblim-cmpi-fsvol-develUpgrade sblim-wbemcliUpgrade sblim-cmpi-fsvol-testUpgrade sblim-cmpi-samba-testUpgrade sblim-cmpi-sambaUpgrade sblim-cmpi-nfsv4-testUpgrade sblim-cmpi-samba-devel | Oct 16, 2024 | Jun 25, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub