CVE-2001-0170 | BDVDB-2026-2352 Detail

Description#

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/5907
http://www.redhat.com/support/errata/RHSA-2001-001.html
http://archives.neohapsis.com/archives/bugtraq/2001-01/0186.html
http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.html
http://www.securityfocus.com/bid/2181

Exploit#

No public exploit known

History#

Version 12001-05-07Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.