Unrated severityNVD Advisory· Published Nov 14, 2000· Updated Jun 16, 2026
CVE-2000-0824
CVE-2000-0824
Description
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
15- www.securityfocus.com/archive/1/79537nvdPatchVendor Advisory
- www.securityfocus.com/bid/648nvdExploitPatchVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2000-08/0436.htmlnvd
- archives.neohapsis.com/archives/bugtraq/2000-08/0509.htmlnvd
- archives.neohapsis.com/archives/bugtraq/2000-08/0525.htmlnvd
- marc.infonvd
- www.calderasystems.com/support/security/advisories/CSSA-2000-028.0.txtnvd
- www.debian.org/security/2000/20000902nvd
- www.linux-mandrake.com/en/updates/MDKSA-2000-040.php3nvd
- www.linux-mandrake.com/en/updates/MDKSA-2000-045.php3nvd
- www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.htmlnvd
- www.redhat.com/support/errata/RHSA-2000-057.htmlnvd
- www.securityfocus.com/bid/1639nvd
- www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/5173nvd
News mentions
0No linked articles in our index yet.