VulnerabilityModified

CVE-2009-4147

HIGH 7.2EPSS 3.71%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.71%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3) LD_LIBMAP_DISABLE, (4) LD_DEBUG, and (5) LD_ELF_HINTS_PATH environment variables, which allows local users to gain privileges by executing a setuid or setguid program with a modified variable containing an untrusted search path that points to a Trojan horse library, different vectors than CVE-2009-4146.

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 3.71% probability · 89th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: freebsd/freebsd
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.