CVE-2009-5064

ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc.

• CWE-264

• http://openwall.com/lists/oss-security/2011/03/07/10Exploit
• http://openwall.com/lists/oss-security/2011/03/07/13Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/07/7Exploit
• http://openwall.com/lists/oss-security/2011/03/08/1Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/10Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/2Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/3Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/7Exploit, Patch
• http://reverse.lostrealm.com/protect/ldd.htmlExploit
• http://www.catonmat.net/blog/ldd-arbitrary-code-execution/Exploit
• http://www.redhat.com/support/errata/RHSA-2011-1526.html
• https://bugzilla.redhat.com/show_bug.cgi?id=531160Exploit, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=682998Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/07/10Exploit
• http://openwall.com/lists/oss-security/2011/03/07/13Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/07/7Exploit
• http://openwall.com/lists/oss-security/2011/03/08/1Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/10Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/2Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/3Exploit, Patch
• http://openwall.com/lists/oss-security/2011/03/08/7Exploit, Patch
• http://reverse.lostrealm.com/protect/ldd.htmlExploit
• http://www.catonmat.net/blog/ldd-arbitrary-code-execution/Exploit
• http://www.redhat.com/support/errata/RHSA-2011-1526.html
• https://bugzilla.redhat.com/show_bug.cgi?id=531160Exploit, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=682998Exploit, Patch

Published

Mar 30, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-5058Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1…
• CVE-2009-5059Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1…
• CVE-2009-5060Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1…
• CVE-2009-5061Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1…
• CVE-2009-5062IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domi…
• CVE-2009-5063Memory leak in the embedded_profile_len function in pngwutil…
• CVE-2009-5065Cross-site scripting (XSS) vulnerability in feedparser.py in…
• CVE-2009-5066twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts c…
• CVE-2009-5067Directory traversal vulnerability in html2ps before 1.0b6 al…
• CVE-2009-5068There is a file disclosure vulnerability in SMF (Simple Mach…7.2
• CVE-2009-5069Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-5070Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…