|
|
|
 |
Vulnerability Note VU#704976Aladdin Ghostscript LD_RUN_PATH environment variable allows libraries to be loaded from current directoryOverviewAlladin Ghostscript, a previewer for postscript files, uses an insecure value for the LD_RUN_PATH environment variable. This allows attackers to supply malicious libraries to be loaded from the current directory.I. DescriptionAlladin Ghostscript is a previewer for postscript files. In execution, it uses an insecure value for the LD_RUN_PATH enviroment variable, which specifies where to find run-time-loaded program libraries. Due to the insecure value, the libraries may be loaded from the current directory.II. ImpactBy substituting malicious code for functions called from program libraries, an attacker may execute arbitrary commands within the permissions of the user. This is particularly dangerous for the root account, where the malicious code may grant administrative privilege to the attacker.III. SolutionApply vendor patches; see the Systems Affected section below.Systems Affected
Referenceshttp://www.kb.cert.org/vuls/id/227312 Multiple linux vendors reported this vulnerability simultaneously. This document was last modified by Tim Shimeall.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||