OpenBSD LD.SO Local Environment Variable Clearing Vulnerability

info
discussion
exploit
solution
references

OpenBSD LD.SO Local Environment Variable Clearing Vulnerability

Solution:
OpenBSD has released source-code patches to address this issue. Please see the references for more information.

OpenBSD OpenBSD 4.0

OpenBSD 005_ldso.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.0/common/005_ldso.patch

OpenBSD OpenBSD 3.9

OpenBSD 016_ldso.patch
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/016_ldso.patch