Secunia Security Advisory – A vulnerability has been reported in osh, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to an error in main.c when handling environment variable substitutions. This can be exploited to inject arbitrary environment variables (e.g. LD_PRELOAD) to cause malicious shared libraries to be loaded by osh. Successful exploitation allows arbitrary code execution with root privileges. The vulnerability has been reported in version 1.7-14. Prior versions may also be affected. Note: An exploit for this vulnerability is publicly available.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41462/sa17527.txt
Source: https://packetstormsecurity.com/files/41462/Secunia-Security-Advisory-17527.html