Page 11 of 103 results (0.012 seconds)

CVSS: 5.5EPSS: 0%CPEs: 25EXPL: 0

31 Dec 2004 — GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program. • http://bugs.gentoo.org/show_bug.cgi?id=59526 •

CVSS: 5.5EPSS: 0%CPEs: 26EXPL: 0

31 Dec 2004 — The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968. • http://marc.info/?l=bugtraq&m=109899903129801&w=2 •

CVSS: 5.5EPSS: 0%CPEs: 30EXPL: 0

20 Oct 2004 — The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files. • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318 •