Oval Definition:oval:org.mitre.oval:def:19821
Revision Date:2014-01-20Version:4
Title:VMware ESX third party updates for Service Console packages glibc, sudo, and openldap
Description:elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environment variable, which allows local users to gain privileges via a crafted dynamic shared object (DSO) located in an arbitrary directory.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3847
Platform(s):VMWare ESX Server 4.0
VMWare ESX Server 4.1
Product(s):
Definition Synopsis
  • Patch ESX410-201101226-SG is not installed
  • VMware ESX Server 4.1 is installed
  • AND Patch ESX410-201101226-SG is not installed
  • OR Patch ESX400-201101405-SG is not installed
  • VMware ESX Server 4.0 is installed
  • AND Patch ESX400-201101405-SG is not installed
  • BACK