CVE-2001-0169
Mandrake Linux - Arbitrary File Write via LD_PRELOAD Environment Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-0169. PoCs published by Shadow.
AI-analyzed exploit summary This exploit leverages the LD_PRELOAD environment variable vulnerability (CVE-2001-0169) to create a malicious shared library load path, forcing the 'userhelper' binary to execute arbitrary code. It writes a script to /etc/initscript that copies a SUID root shell to /var/tmp/.nothing, enabling privilege escalation.
Description
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
Exploits (1)
This exploit leverages the LD_PRELOAD environment variable vulnerability (CVE-2001-0169) to create a malicious shared library load path, forcing the 'userhelper' binary to execute arbitrary code. It writes a script to /etc/initscript that copies a SUID root shell to /var/tmp/.nothing, enabling privilege escalation.