CVE-2000-0824: High severity GNU glibc vulnerability
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LDPRELOAD or LDLIBRARYPATH.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0824?
The severity of CVE-2000-0824 is considered high due to its potential for allowing arbitrary command execution in setuid programs.
How do I fix CVE-2000-0824?
To fix CVE-2000-0824, you should upgrade glibc to a version later than 2.1.1 that addresses this vulnerability.
Who is affected by CVE-2000-0824?
Users of glibc version 2.1.1 and systems that utilize setuid programs are affected by CVE-2000-0824.
What type of attack does CVE-2000-0824 enable?
CVE-2000-0824 enables local users to execute arbitrary commands through the misuse of environmental variables.
Is CVE-2000-0824 a local or remote vulnerability?
CVE-2000-0824 is a local vulnerability, as it requires local user access to exploit.