CVE-2010-0826

Synopsis Moderate: nss_db security update Type/Severity Security Advisory: Moderate Topic Updated nss_db packages that fix one security issue are now available forRed Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact A Common Vulnerability Sco ...

Debian Bug report logs - #577057 CVE-2010-0826: allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module Package: libnss-db; Maintainer for libnss-db is Debian QA Group <packages@qadebianorg>; Source for libnss-db is src:libnss-db (PTS, buildd, popcon) ...

Stephane Chazelas discovered that libnss-db did not correctly set up a database environment A local attacker could exploit this to read the first line of arbitrary files, leading to a loss of privacy and possibly privilege escalation ...