CVE-2006-6164
First published: Wed Nov 29 2006(Updated: )
The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, which allows local users to pass dangerous variables such as LD_PRELOAD to loading processes, which might be leveraged to gain privileges.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenBSD | =3.9 | |
| OpenBSD | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.matasano.com/log/592/finger-79tcp-mcdonald-dowd-and-schuh-challenge-part-2/
- http://www.openbsd.org/errata39.html#ldso
- http://www.openbsd.org/errata.html#ldso
- http://securitytracker.com/id?1017253
- http://secunia.com/advisories/22993
- http://www.securityfocus.com/bid/21188
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30441
- http://www.securityfocus.com/archive/1/452428/100/0/threaded
- http://www.securityfocus.com/archive/1/452371/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-6164?
CVE-2006-6164 is considered a local privilege escalation vulnerability.
How do I fix CVE-2006-6164?
To fix CVE-2006-6164, upgrade to a patched version of OpenBSD that addresses this issue.
What versions of OpenBSD are affected by CVE-2006-6164?
CVE-2006-6164 affects OpenBSD versions 3.9 and 4.0.
Who can exploit CVE-2006-6164?
Local users with access to the system can exploit CVE-2006-6164.
What is the impact of exploiting CVE-2006-6164?
Exploiting CVE-2006-6164 may allow an attacker to run arbitrary code with elevated privileges.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/remedy
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/openbsd
- canonical/openbsd
- version/openbsd/3.9
- version/openbsd/4.0