Homepage
About Snyk

CVE-2004-1453 Affecting glibc package, versions <2.3.5

low

Snyk CVSS

    Attack Complexity Low

    Threat Intelligence

    EPSS 0.04% (6th percentile)
Expand this section
NVD
4 medium

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-DEBIAN11-GLIBC-524777
  • published 31 Dec 2004
  • disclosed 31 Dec 2004
Report a new vulnerability Found a mistake?

Introduced: 31 Dec 2004

CVE-2004-1453 Open this link in a new tab

How to fix?

Upgrade Debian:11 glibc to version 2.3.5 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Debian. See How to fix? for Debian:11 relevant fixed versions and status.

GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.