PT-2005-2062 · Novell · Novell Linux Desktop 9

Publicado 2005-04-10 · Atualizado 2008-09-05 · CVE-2005-1040

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Linux Desktop 9

Description The issue is related to user input being passed to network scripts without verification in the netapplet component, allowing local users to gain root privileges.

Recommendations For Novell Linux Desktop 9, consider restricting access to the netapplet component until a fix is available, and ensure that all user input is properly verified before being passed to network scripts.

Correção

Identificadores relacionados

CVE-2005-1040

Produtos afetados

Novell Linux Desktop 9

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-1040 · Nota de Segurança
• http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html · Aviso do Fabricante