CVE-2011-2709

Related Files

Mandriva Linux Security Advisory 2013-043

Posted Apr 5, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-043 - This update fixes insecure getenv() usage in libgssglue, which could be used under some circumstances by local attackers do gain root privileges.

tags | advisory, local, root

systems | linux, mandriva

advisories | CVE-2011-2709

SHA-256 | 1fcd91ea96726db4478cf13582052b7ca9ca576e1909135d44bd7e922de538a2

Download | Favorite | View

Ubuntu Security Notice USN-1612-1

Posted Oct 15, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1612-1 - It was discovered that libgssglue incorrectly handled the GSSAPI_MECH_CONF environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges.

tags | advisory, local, root

systems | linux, ubuntu

advisories | CVE-2011-2709, CVE-2011-2709

SHA-256 | 804e32cd01efd4b890bc3ce0fbb694f2f977a6f2c88b4518b52a6b8342278849

Download | Favorite | View

Gentoo Linux Security Advisory 201209-22

Posted Sep 28, 2012

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201209-22 - A vulnerability in libgssglue may allow a local attacker to gain escalated privileges. Versions less than 0.4 are affected.

tags | advisory, local

systems | linux, gentoo

advisories | CVE-2011-2709

SHA-256 | 0d3d0000d184d912cc4e1048613d398e249e31801e65d26a33f4721fa15ec5fd

Download | Favorite | View