CVE-2005-4532

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-28 · updated 2026-06-16

Description

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

Affected products

Scponly: 3.1, 3.2, 3.3, 3.4, 3.6, 3.7 (+5)

References

http://secunia.com/advisories/18223
http://secunia.com/advisories/18236
http://secunia.com/advisories/18829
http://sublimation.org/scponly/#relnotes
http://www.debian.org/security/2006/dsa-969
http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml
http://www.securityfocus.com/bid/16051
https://exchange.xforce.ibmcloud.com/vulnerabilities/23874
http://secunia.com/advisories/18223
http://secunia.com/advisories/18236
http://secunia.com/advisories/18829
http://sublimation.org/scponly/#relnotes

Get alerted when CVE-2005-4532 or the next vulnerability affects your stack