CVE-2006-6165 - ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes

Back Back to CVE browser

HIGH

ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes

Published Nov 29, 2006

7.8

HIGH

CVSS 3.1

EPSS 0.35%

Description

ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is the responsibility of the application to properly sanitize the environment

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/archive/1/452371/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/452428/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Link	Providers	Tags
http://www.securityfocus.com/archive/1/452371/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/452428/100/0/threaded		mailing-listx_refsource_BUGTRAQ