CVE-2016-10151

High

Published: 01/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID, allowing local users to gain privileges via the HESIOD_CONFIG or HES_DOMAIN environment variable and leveraging certain SUID/SGUID binaries.

Risk Assessment

Local users may gain unauthorized privileges, potentially leading to serious security breaches in the system.

Recommendation

It is recommended to restrict access to environment variables and review and update system configurations to minimize the risk of exploitation of this vulnerability.

Other vulnerabilities in Hesiod 3.2.1

CVE-2016-10152Critical
The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 defaults to the '.athena.mit.edu' domain when opening the configuration file fails, allowing remote attackers to gain root privileges by poisoning the DNS cache.

Original NVD description (English source)

The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG or (2) HES_DOMAIN environment variable and leveraging certain SUID/SGUID binary.