Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clearcase | Rational_software | 3.2_plus (including) | 3.2_plus (including) |
| Clearcase | Rational_software | 4.0 (including) | 4.0 (including) |
| Clearcase | Rational_software | 4.1 (including) | 4.1 (including) |
| Clearcase | Rational_software | 4.2 (including) | 4.2 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=100528623328037\u0026w=2
- http://www.iss.net/security_center/static/7488.php
- http://www.securityfocus.com/bid/3523
- http://marc.info/?l=bugtraq\u0026m=100528623328037\u0026w=2
- http://www.iss.net/security_center/static/7488.php
- http://www.securityfocus.com/bid/3523