Severity : Medium Published : 2011-04-08 Modified : 2012-01-26 Base Score : 6.9 Details : Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library (aka glibc or libc6), including glibc-2.5-49.el5_5.6 and glibc-2.12-1.7.el6_0.3 in Red Hat Enterprise Linux, allow local users to gain privileges via a crafted dynamic shared object (DSO) in a subdirectory of the current working directory during execution of a (1) setuid or (2) setgid program that has $ORIGIN in (a) RPATH or (b) RUNPATH within the program itself or a referenced library. NOTE: this issue exists because of an incorrect fix for CVE-2010-3847. Product/Version :   Per: http://cwe.mitre.org/data/definitions/426.html   'CWE-426: Untrusted Search Path'       Pro 4.x   CGE 4.x   Mobilinux 4.x   CGE 5.x   Mobilinux 5.x   Pro 4.x   CGE 4.x   Mobilinux 4.x   Pro 5.0   Mobilinux 5.0.24   MVL 5 Atom   Pro 5.0.24   MVL 5 OMAP3   MVL 5 OMAP3530

CVE-2011-4914 CVE-2011-4913 CVE-2011-4885 CVE-2011-4619 CVE-2011-4578 CVE-2011-4577 CVE-2011-4576 CVE-2011-4566 CVE-2011-4330 CVE-2011-4324 CVE-2011-4317 CVE-2011-4313 CVE-2011-4132 CVE-2011-4130 CVE-2011-4127 CVE-2011-4110 CVE-2011-4109 CVE-2011-4108 CVE-2011-4081 CVE-2011-4077 CVE-2011-4029 CVE-2011-4028 CVE-2011-3639 CVE-2011-3607 CVE-2011-3389 CVE-2011-3378 CVE-2011-3368 CVE-2011-3363 CVE-2011-3359 CVE-2011-3353 CVE-2011-3348 CVE-2011-3210 CVE-2011-3209 CVE-2011-3192 CVE-2011-3191 CVE-2011-3188 CVE-2011-3149 CVE-2011-3148 CVE-2011-3026 CVE-2011-2898 CVE-2011-2896 CVE-2011-2895 CVE-2011-2834 CVE-2011-2724 CVE-2011-2699 CVE-2011-2695 CVE-2011-2694 CVE-2011-2692 CVE-2011-2691 CVE-2011-2690 CVE-2011-2534 CVE-2011-2525 CVE-2011-2522 CVE-2011-2501 CVE-2011-2496 CVE-2011-2494 CVE-2011-2492 CVE-2011-2491 CVE-2011-2484 CVE-2011-2213 CVE-2011-2212 CVE-2011-2202 CVE-2011-2192 CVE-2011-2182 CVE-2011-2022 CVE-2011-1945 CVE-2011-1944 CVE-2011-1938 CVE-2011-1928 CVE-2011-1833 CVE-2011-1776 CVE-2011-1767 CVE-2011-1760 CVE-2011-1759 CVE-2011-1751 CVE-2011-1750 CVE-2011-1747 CVE-2011-1746 CVE-2011-1745 CVE-2011-1677 CVE-2011-1676 CVE-2011-1675 CVE-2011-1659 CVE-2011-1658 CVE-2011-1593 CVE-2011-1592 CVE-2011-1591 CVE-2011-1590 CVE-2011-1577 CVE-2011-1573 CVE-2011-1495 CVE-2011-1494 CVE-2011-1493 CVE-2011-1477 CVE-2011-1182 CVE-2011-1173 CVE-2011-1172 CVE-2011-1171 CVE-2011-1170 CVE-2011-1163 CVE-2011-1155 CVE-2011-1098 CVE-2011-1095 CVE-2011-1093 CVE-2011-1090 CVE-2011-1082 CVE-2011-1071 CVE-2011-1044 CVE-2011-1017 CVE-2011-1013 CVE-2011-1012 CVE-2011-1010 CVE-2011-0997 CVE-2011-0719 CVE-2011-0711 CVE-2011-0695 CVE-2011-0539 CVE-2011-0536 CVE-2011-0521 CVE-2011-0465 CVE-2011-0463 CVE-2011-0419 CVE-2011-0014