CVE-2005-2072: High severity Sun SunOS vulnerability
The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LDAUDIT environment variable in setuid or setgid programs, which allows local users to gain privileges by (1) modifying LDAUDIT to reference malicious code and possibly (2) using a long value for LDAUDIT.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2072?
CVE-2005-2072 is considered to have a high severity due to its potential for privilege escalation.
How do I fix CVE-2005-2072?
To mitigate CVE-2005-2072, avoid using setuid or setgid programs that rely on the LD_AUDIT environment variable or restrict the use of these programs.
What versions of Solaris are affected by CVE-2005-2072?
CVE-2005-2072 affects Solaris 8, 9, and 10, including specific versions for both x86 and SPARC architectures.
Can local users exploit CVE-2005-2072?
Yes, local users can exploit CVE-2005-2072 by modifying the LD_AUDIT environment variable to reference malicious code.
Is CVE-2005-2072 a remote or local vulnerability?
CVE-2005-2072 is a local vulnerability, meaning it can only be exploited by users with local access to the system.