CVE-2011-0536

CVE-2011-0536 describes multiple untrusted search path vulnerabilities in specific modified versions of the GNU C Library (glibc), including those in Red Hat Enterprise Linux. This flaw allows local users to escalate privileges by crafting a dynamic shared object (DSO) in a subdirectory when executing setuid or setgid programs that improperly handle $ORIGIN in RPATH or RUNPATH. With a CVSS score of 6.9, this vulnerability is considered medium severity, requiring local access and medium attack complexity, but potentially leading to complete compromise of confidentiality, integrity, and availability. It specifically impacts glibc and Red Hat Enterprise Linux distributions. While there is no evidence of active exploitation (KEV: No), an exploit for a related issue (EDB-15274) exists, suggesting the feasibility of exploitation. Community discussion and media coverage are minimal, indicating low public awareness despite the potential for privilege escalation.