• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

GNU GLibC LD_DEBUG Local Information Disclosure Vulnerability

Solution:
Gentoo has released an advisory (GLSA 200408-16) and updated eBuilds to address this issue. Gentoo users are advised to execute the following commands as a superuser in order to apply the fixes and bring their system up to date.

emerge sync
emerge -pv your_version
emerge your_version

Where 'your_version' is the version of glibc that is installed on the Gentoo Linux host.

SGI has released advisory 20050503-01-U, along with SGI Advanced Linux Environment 3 Security Update #38 to address this, and other issues. Please see the referenced advisory for further information.

Avaya has relased advisory ASA-2005-155 to identify vulnerable Avaya products. Avaya recommends that customers should install vendor upgrades depending on the underlying operating systems running Avaya products.