QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qdbm | Qdbm | 1.8.13 (including) | 1.8.13 (including) |
| Qdbm | Qdbm | 1.8.14 (including) | 1.8.14 (including) |
| Qdbm | Qdbm | 1.8.15 (including) | 1.8.15 (including) |
| Qdbm | Qdbm | 1.8.16 (including) | 1.8.16 (including) |
| Qdbm | Qdbm | 1.8.17 (including) | 1.8.17 (including) |
| Qdbm | Qdbm | 1.8.21 (including) | 1.8.21 (including) |
| Qdbm | Qdbm | 1.8.24 (including) | 1.8.24 (including) |
| Qdbm | Qdbm | 1.8.30 (including) | 1.8.30 (including) |
| Qdbm | Qdbm | 1.8.31 (including) | 1.8.31 (including) |
References
- http://secunia.com/advisories/17427/
- http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml
- http://www.osvdb.org/20527
- http://www.securityfocus.com/bid/15120
- http://www.vupen.com/english/advisories/2005/2281
- http://secunia.com/advisories/17427/
- http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml
- http://www.osvdb.org/20527
- http://www.securityfocus.com/bid/15120
- http://www.vupen.com/english/advisories/2005/2281