An exploit for FreeBSD is in circulation that allows users with restricted access to escalate their privileges to root level. The problem is caused by a flaw in the run-time link editor (rtld) which, in certain circumstances, accepts specially crafted environment variables. According to Kingcope, the developer of the exploit, the flaw is "incredibly easy" to exploit by, for example, setting a path to a specially crafted library for the LD_PRELOAD environment variable and then starting an SUID program like Ping.. LD_PRELOAD instructs the loader to load additional libraries when starting a program The link for this article located at H Security is no longer available. . A vulnerability in OpenBSD permits standard users to alter system-level configurations, potentially obtaining administrative privileges under certain conditions.. FreeBSD Exploit, Privilege Escalation, LD_PRELOAD Exploit. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.