openSUSE Security Update : glibc (openSUSE-SU-2010:0913-1)
High Nessus Plugin ID 50373
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThis update of glibc fixes various bugs and security issues :
CVE-2010-3847: Decoding of the $ORIGIN special value in various LD_ environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion triggers before the respective code is executed. The bug was fixed nevertheless.
CVE-2010-3856: The LD_AUDIT environment was not pruned during setuid root execution and could load shared libraries from standard system library paths. This could be used by local attackers to inject code into setuid root programs and so elevated privileges.
CVE-2010-0830: Integer overflow causing arbitrary code execution in ld.so
--verify mode could be induced by a specially crafted binary.
CVE-2010-0296: The addmntent() function would not escape the newline character properly, allowing the user to insert arbitrary newlines to the /etc/mtab; if the addmntent() is run by a setuid mount binary that does not do extra input checking, this would allow custom entries to be inserted in /etc/mtab.
CVE-2008-1391: The strfmon() function contains an integer overflow vulnerability in width specifiers handling that could be triggered by an attacker that can control the format string passed to strfmon().
SolutionUpdate the affected glibc packages.