CNCVE编号：CNCVE-20000959 CVE编号：CVE-2000-0959 安全级别：中 漏洞中文描述： glibc2在由setuid程序产生一个程序时不能正确地清除 LD_DEBUG_OUTPUT 和 LD_DEBUG 环境变量，这导致本地用户可以通过symlink攻击来覆盖文件。 漏洞英文描述： glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack. 漏洞参考： BUGTRAQ:20000926 ld.so bug - LD_DEBUG_OUTPUT follows symlinks | URL:http://www.securityfocus.com/archive/1/85028 | BID:1719 | URL:http://www.securityfocus.com/bid/1719 | XF:glibc-unset-symlink | http://xforce.iss.net/static/5299.php 系统类型：其他 漏洞类型：竞态情况错误