CVE-2009-4146

CVE-2009-4146 describes a local privilege escalation vulnerability affecting FreeBSD versions 7.1, 7.2, and 8.0. The flaw lies in the Run-Time Link-Editor (rtld) which fails to clear the LD_PRELOAD environment variable. This allows a local attacker to execute a setuid or setguid program with a malicious LD_PRELOAD, pointing to a Trojan horse library and gaining elevated privileges. With a CVSS score of 7.2 (High), this vulnerability is easily exploitable locally with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 97/100 further emphasizes its critical nature. Exploit intelligence indicates readily available exploit code, including a Metasploit module and an ExploitDB entry (EDB-10255). While not listed on the KEV catalog, the existence of public exploits suggests a high potential for exploitation, despite limited community discussion or media coverage.