Unrated severityNVD Advisory· Published Mar 30, 2011· Updated Jun 16, 2026
CVE-2009-5064
CVE-2009-5064
Description
ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
25cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*range: <=2.1.3
- cpe:2.3:a:gnu:glibc:1.00:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.03:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.04:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.05:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.06:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.07:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.08:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.09:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:1.09.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*
- (no CPE)range: <=2.13
Patches
Vulnerability mechanics
References
13- openwall.com/lists/oss-security/2011/03/07/10nvdExploit
- openwall.com/lists/oss-security/2011/03/07/13nvdExploitPatch
- openwall.com/lists/oss-security/2011/03/07/7nvdExploit
- openwall.com/lists/oss-security/2011/03/08/1nvdExploitPatch
- openwall.com/lists/oss-security/2011/03/08/10nvdExploitPatch
- openwall.com/lists/oss-security/2011/03/08/2nvdExploitPatch
- openwall.com/lists/oss-security/2011/03/08/3nvdExploitPatch
- openwall.com/lists/oss-security/2011/03/08/7nvdExploitPatch
- reverse.lostrealm.com/protect/ldd.htmlnvdExploit
- www.catonmat.net/blog/ldd-arbitrary-code-execution/nvdExploit
- bugzilla.redhat.com/show_bug.cginvdExploitPatch
- bugzilla.redhat.com/show_bug.cginvdExploitPatch
- www.redhat.com/support/errata/RHSA-2011-1526.htmlnvd
News mentions
0No linked articles in our index yet.