CVE-2004-1453
published 2004-12-31CVE-2004-1453: GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program…
PriorityP47low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.36%
29.0th percentile
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | glibc | < glibc 2.3.5 (bookworm) | glibc 2.3.5 (bookworm) |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW
vendor_debian2.1LOW
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j6cx-h236-3cg8: GNU glibc 2
ghsa_unreviewed·2022-04-29
CVE-2004-1453 [LOW] GHSA-j6cx-h236-3cg8: GNU glibc 2
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
OSV
CVE-2004-1453: GNU glibc 2
osv·2004-12-31·CVSS 2.1
CVE-2004-1453 [LOW] CVE-2004-1453: GNU glibc 2
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
Red Hat
security flaw
vendor_redhat·2004-08-17·CVSS 2.1
CVE-2004-1453 [LOW] security flaw
security flaw
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
Debian
CVE-2004-1453: glibc - GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 be...
vendor_debian·2004·CVSS 2.1
CVE-2004-1453 [LOW] CVE-2004-1453: glibc - GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 be...
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
Scope: local
bookworm: resolved (fixed in 2.3.5)
bullseye: resolved (fixed in 2.3.5)
forky: resolved (fixed in 2.3.5)
sid: resolved (fixed in 2.3.5)
trixie: resolved (fixed in 2.3.5)
No detection rules found.
No public exploits indexed.
http://bugs.gentoo.org/show_bug.cgi?id=59526http://secunia.com/advisories/12306http://www.gentoo.org/security/en/glsa/glsa-200408-16.xmlhttp://www.redhat.com/support/errata/RHSA-2005-256.htmlhttp://www.redhat.com/support/errata/RHSA-2005-261.htmlhttp://www.securityfocus.com/bid/10963https://exchange.xforce.ibmcloud.com/vulnerabilities/17006https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762http://bugs.gentoo.org/show_bug.cgi?id=59526http://secunia.com/advisories/12306http://www.gentoo.org/security/en/glsa/glsa-200408-16.xmlhttp://www.redhat.com/support/errata/RHSA-2005-256.htmlhttp://www.redhat.com/support/errata/RHSA-2005-261.htmlhttp://www.securityfocus.com/bid/10963https://exchange.xforce.ibmcloud.com/vulnerabilities/17006https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762
2004-12-31
Published