CVE-2000-0959
Summary
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
- HIGH
- LOCAL
- NONE
- PARTIAL
- NONE
- NONE
References
Advisory Timeline
- Published