libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load     untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as     demonstrated using mount.nfs. (CVE-2011-2709)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update fixes insecure getenv() usage in libgssglue, which could be used under some circumstances by local attackers do gain root privileges (CVE-2011-2709).

It was discovered that libgssglue incorrectly handled the GSSAPI_MECH_CONF environment variable when running a privileged binary. A local attacker could exploit this to gain root privileges.
(CVE-2011-2709).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201209-22 (libgssglue: Privilege escalation)

    libgssglue does not securely use getenv() when loading a library for a       setuid application.
  Impact :

    A local attacker could gain escalated privileges.
  Workaround :

    There is no known workaround at this time.

- Fix for CVE-2011-2709 Patch from Marcus Meissner Note:
    Although     https://bugzilla.novell.com/show_bug.cgi?id=694598     mentions mount.nfs, libgssglue is not used by mount.nfs.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
217530	Linux Distros Unpatched Vulnerability : CVE-2011-2709	Nessus	Misc.	Local	critical
66057	Mandriva Linux Security Advisory : libgssglue (MDVSA-2013:043)	Nessus	Mandriva Local Security Checks	Local	medium
62557	Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libgssglue vulnerability (USN-1612-1)	Nessus	Ubuntu Local Security Checks	Local	medium
62364	GLSA-201209-22 : libgssglue: Privilege escalation	Nessus	Gentoo Local Security Checks	Local	medium
59531	Fedora 17 : libgssglue-0.4-0.fc17 (2012-7971)	Nessus	Fedora Local Security Checks	Local	medium
59429	Fedora 16 : libgssglue-0.4-0.fc16 (2012-8067)	Nessus	Fedora Local Security Checks	Local	medium

Detections

Analytics

CVE-2011-2709

critical

Tenable Plugins

critical

medium

medium

medium

medium

medium