CVE-2004-1453

GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program…

published February 13, 2005

CVSS
—
EPSS
0%
Percentile
28.8
In the wild
Unconfirmed
What it is

GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00364 · 28.8th percentile
Published
2005-02-13T05:00Z
EPSS history
Timeline
  • 13 FEB 05:00Z
    GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program…
    cvelistv5