Description
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.
References
- 2144 exploit
- 19430 vdb-entry
- http://karol.wiesek.pl/files/lesstif-advisory.pdf
- ADV-2006-3230 vdb-entry
- 21428 third-party-advisory
- lestif-libxm-privilege-escalation(28298) vdb-entry