Description
Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. (dot dot) sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers.
References
- oval:org.mitre.oval:def:2121 vdb-entry signature
- 23317 third-party-advisory
- solaris-ld-lang-directory-traversal(30849) vdb-entry
- 20061212 Sun Microsystems Solaris ld.so Directory Traversal Vulnerability third-party-advisory
- 102724 vendor-advisory
- 21564 vdb-entry
- 1017376 vdb-entry
- ADV-2006-4979 vdb-entry