• info
• discussion
• exploit
• solution
• references

glib unsetenv() Duplicate Entry Removal Vulnerability

Solution:
It has been indicated that version 2.2 of glibc will remedy this problem.

A patch is available to address this problem.


GNU glibc 2.0

• GNU glibc.patch
  http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sysdeps/generic/dl-e nviron.c.diff?cvsroot=glibc&r1=1.1&r2=1.2&f=u

GNU glibc 2.1

• GNU glibc.patch
  http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sysdeps/generic/dl-e nviron.c.diff?cvsroot=glibc&r1=1.1&r2=1.2&f=u

GNU glibc 2.1.1

• GNU glibc.patch
  http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sysdeps/generic/dl-e nviron.c.diff?cvsroot=glibc&r1=1.1&r2=1.2&f=u

GNU glibc 2.1.1 -6

• GNU glibc.patch
  http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sysdeps/generic/dl-e nviron.c.diff?cvsroot=glibc&r1=1.1&r2=1.2&f=u

GNU glibc 2.1.2

• GNU glibc.patch
  http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sysdeps/generic/dl-e nviron.c.diff?cvsroot=glibc&r1=1.1&r2=1.2&f=u

GNU glibc 2.1.3

• GNU glibc.patch
  http://sources.redhat.com/cgi-bin/cvsweb.cgi/libc/sysdeps/generic/dl-e nviron.c.diff?cvsroot=glibc&r1=1.1&r2=1.2&f=u