Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other users via by running an ld-linked application from the current directory, which could contain an attacker-controlled library file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SuSE LD RPATH/RUNPATH本地权限提升漏洞
Vulnerability Description
SuSE Linux是一款开放源代码Linux系统。 SuSE的GNU连接器在处理链接RPATH/RUNPATH组件时存在问题，本地攻击者可能利用此漏洞提升权限。在链接到二进制程序时，SuSE的GNU连接器ld的特定补丁会删除多余的RPATH和RUNPATH组件。由于这个例程中的问题，ld有时会留下空的RPATH组件。如果以空的RPATH组件运行二进制程序的话，动态连接器就会试图加载当前目录的共享函数库。攻击者可以诱骗用户在包含有精心构造的共享库的目录中运行受影响的应用程序，导致以受害用户id的权限执行任
CVSS Information
N/A
Vulnerability Type
N/A