Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

OpenBSD LD.SO Local Environment Variable Clearing Vulnerability

OpenBSD is prone to a local vulnerability that may allow attackers to pass malicious environment variables to applications, bypassing expected security restrictions.

Attackers may be able to exploit this issue to execute arbitrary code with elevated privileges.

This issue affects OpenBSD 3.9 and 4.0; prior versions may also be affected.







 

Privacy Statement
Copyright 2009, SecurityFocus