LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Sponsored link

Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

Recent Features

LWN.net Weekly Edition for September 4, 2008

The Kernel Hacker's Bookshelf: UNIX Internals

DRI, BSD, and Linux

SCHED_FIFO and realtime throttling

LWN.net Weekly Edition for August 28, 2008

Printable page
Weekly edition Kernel Security Distributions Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ

glibc: integer overflow

Package(s):glibc CVE #(s):CVE-2007-3508
Created:July 4, 2007 Updated:July 4, 2007
Description: The GNU C library (prior to version 2.5-r4) suffers from an integer overflow vulnerability in the dynamic linker which could, maybe, be exploited to run code with root privileges.
Alerts:
Gentoo 200707-04 2007-07-03
(Log in to post comments)

glibc: integer overflow

Posted Jul 5, 2007 15:22 UTC (Thu) by smithj (subscriber, #38034) [Link]

As mentioned on https://issues.rpath.com/browse/RPL-1514, rPath does not consider this a vulnerability, and thus will not release an update.

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds