ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | 4.2.7 (including) | 4.2.7 (including) |
| Imagemagick | Imagemagick | 4.2.9 (including) | 4.2.9 (including) |
| Imagemagick | Imagemagick | 5.2.0 (including) | 5.2.0 (including) |
| Imagemagick | Imagemagick | 5.2.6 (including) | 5.2.6 (including) |
| Imagemagick | Imagemagick | 5.3.0 (including) | 5.3.0 (including) |
| Imagemagick | Imagemagick | 5.3.1 (including) | 5.3.1 (including) |
| Imagemagick | Imagemagick | 5.3.2 (including) | 5.3.2 (including) |
| Imagemagick | Imagemagick | 5.3.3 (including) | 5.3.3 (including) |
| Imagemagick | Imagemagick | 5.3.4 (including) | 5.3.4 (including) |
| Imagemagick | Imagemagick | 5.3.5 (including) | 5.3.5 (including) |
| Imagemagick | Imagemagick | 5.3.6 (including) | 5.3.6 (including) |
| Imagemagick | Imagemagick | 5.3.7 (including) | 5.3.7 (including) |
| Imagemagick | Imagemagick | 5.3.8.2 (including) | 5.3.8.2 (including) |
| Imagemagick | Imagemagick | 5.3.9 (including) | 5.3.9 (including) |
| Imagemagick | Imagemagick | 5.4.0.5 (including) | 5.4.0.5 (including) |
| Imagemagick | Imagemagick | 5.4.1.2 (including) | 5.4.1.2 (including) |
| Imagemagick | Imagemagick | 5.4.2.3 (including) | 5.4.2.3 (including) |
| Imagemagick | Imagemagick | 5.4.3.11 (including) | 5.4.3.11 (including) |
| Imagemagick | Imagemagick | 5.4.4.5 (including) | 5.4.4.5 (including) |
| Imagemagick | Imagemagick | 5.4.5.1 (including) | 5.4.5.1 (including) |
| Imagemagick | Imagemagick | 5.4.6.3 (including) | 5.4.6.3 (including) |
| Imagemagick | Imagemagick | 5.4.7.4 (including) | 5.4.7.4 (including) |
| Imagemagick | Imagemagick | 5.4.8.3 (including) | 5.4.8.3 (including) |
| Imagemagick | Imagemagick | 5.4.9.1 (including) | 5.4.9.1 (including) |
| Imagemagick | Imagemagick | 5.5.1.4 (including) | 5.5.1.4 (including) |
| Imagemagick | Imagemagick | 5.5.2.5 (including) | 5.5.2.5 (including) |
| Imagemagick | Imagemagick | 5.5.3.2 (including) | 5.5.3.2 (including) |
| Imagemagick | Imagemagick | 5.5.4.4 (including) | 5.5.4.4 (including) |
| Imagemagick | Imagemagick | 5.5.5.3 (including) | 5.5.5.3 (including) |
| Imagemagick | Imagemagick | 5.5.6 (including) | 5.5.6 (including) |
| Imagemagick | Imagemagick | 5.5.7.31 (including) | 5.5.7.31 (including) |
| Imagemagick | Imagemagick | 5.5.7.35 (including) | 5.5.7.35 (including) |
| Imagemagick | Imagemagick | 5.5.7q8 (including) | 5.5.7q8 (including) |
| Imagemagick | Imagemagick | 5.5.7q16 (including) | 5.5.7q16 (including) |
| Imagemagick | Imagemagick | 6.0 (including) | 6.0 (including) |
| Imagemagick | Imagemagick | 6.0.0.7 (including) | 6.0.0.7 (including) |
| Imagemagick | Imagemagick | 6.0.1.4 (including) | 6.0.1.4 (including) |
| Imagemagick | Imagemagick | 6.0.2.7 (including) | 6.0.2.7 (including) |
| Imagemagick | Imagemagick | 6.0.3.5 (including) | 6.0.3.5 (including) |
| Imagemagick | Imagemagick | 6.0.4.4 (including) | 6.0.4.4 (including) |
| Imagemagick | Imagemagick | 6.0.5.3 (including) | 6.0.5.3 (including) |
| Imagemagick | Imagemagick | 6.0.6.2 (including) | 6.0.6.2 (including) |
| Imagemagick | Imagemagick | 6.0.7.3 (including) | 6.0.7.3 (including) |
| Imagemagick | Imagemagick | 6.0.8.3 (including) | 6.0.8.3 (including) |
| Imagemagick | Imagemagick | 6.1.0.9 (including) | 6.1.0.9 (including) |
| Imagemagick | Imagemagick | 6.1.1.6 (including) | 6.1.1.6 (including) |
| Imagemagick | Imagemagick | 6.1.2.7 (including) | 6.1.2.7 (including) |
| Imagemagick | Imagemagick | 6.1.3.7 (including) | 6.1.3.7 (including) |
| Imagemagick | Imagemagick | 6.1.4.5 (including) | 6.1.4.5 (including) |
| Imagemagick | Imagemagick | 6.1.5.8 (including) | 6.1.5.8 (including) |
| Imagemagick | Imagemagick | 6.1.6.9 (including) | 6.1.6.9 (including) |
| Imagemagick | Imagemagick | 6.1.7.5 (including) | 6.1.7.5 (including) |
| Imagemagick | Imagemagick | 6.1.8.7 (including) | 6.1.8.7 (including) |
| Imagemagick | Imagemagick | 6.1.9.4 (including) | 6.1.9.4 (including) |
| Imagemagick | Imagemagick | 6.2.0.8 (including) | 6.2.0.8 (including) |
| Imagemagick | Imagemagick | 6.2.1.7 (including) | 6.2.1.7 (including) |
| Imagemagick | Imagemagick | 6.2.2.5 (including) | 6.2.2.5 (including) |
| Imagemagick | Imagemagick | 6.2.3.6 (including) | 6.2.3.6 (including) |
References
- http://secunia.com/advisories/17427/
- http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml
- http://www.osvdb.org/20528
- http://www.securityfocus.com/bid/15120
- http://www.vupen.com/english/advisories/2005/2281
- http://secunia.com/advisories/17427/
- http://www.gentoo.org/security/en/glsa/glsa-200511-02.xml
- http://www.osvdb.org/20528
- http://www.securityfocus.com/bid/15120
- http://www.vupen.com/english/advisories/2005/2281