Vulnerability in Gnu Glibc

CVE-2000-0959

glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.

EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.

Affected products

Gnu Glibc — versions 2.1.3.10
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)