GNU C Loader Root Privilege Security Exploit

Linux distributions are working to plug a severe security hole.

There's a vulnerability in the library loader of the GNU C library that can be exploited to gain root access.

The hole was discovered by Tavis Ormandy.

The H reported, "Using various tricks involving hard links, redirected file descriptors and environment variables, Ormandy managed to exploit the vulnerability and open a shell at root privilege level."

View Article