A local overflow exists in the 'ld.so' dynamic linkers in some Linux distributions. By forcing an error while calling a dynamically linked setuid program with a long program name (argv[0]), a local attacker can overflow a buffer and execute arbitrary code on the system and use this vulnerability to gain root privileges on the system.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Rumored / Private
Disclosure:
OSVDB Verified
Solution
Upgrade to ld.so/ld-linux.so version 1.9.5 or higher, as it has been reported to fix this vulnerability. For Caldera OpenLinux 1.1 upgrade to ld.so package version 1.7.14-5 or higher, as it has been reported to fix this vulnerability. KSRT has also released an unofficial patch to address this vulnerability.
dec.net - DEC