CVE-2001-0169 - CVE House
Back to Database
Status published Low CVE-2001-0169

When using the LD_PRELOAD environmental variable in SUID or SGID...

Vulnerability Description

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-0169

Credits & Attribution

No credits recorded in the NVD database.

References

More from mandrakesoft

View All →
CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont before...
Low 3.8
CVE-2005-2377
nss_ldap 181 to versions before 213, as used in Mandrake...
Medium 5
CVE-2005-1379
The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs...
Medium 4.6
CVE-2004-2395
Memory leak in passwd 0.68 allows local users to cause...
Low 2.1
CVE-2004-2394
Off-by-one error in passwd 0.68 and earlier, when using the...
Low 2.1

Affected Vendor

mandrakesoft

View all reports →

Affected Software

mandrake linux, mandrake linux corporate server, linux, secure linux, turbolinux
Vulnerable Versions:
6.0, 6.1, 7.0, 7.1, 7.2, 1.0.1, 6.2, 1.1, 1.2, 0

Timeline

Official Publish: May 7th, 2001
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.