PT-2011-2368 · Suse · Aaa Base

Publicado 2011-04-01 · Atualizado 2018-10-30 · CVE-2011-0468

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions aaa base versions prior to 11.3-8.9.1 in SUSE openSUSE 11.3 aaa base versions prior to 11.4-54.62.1 in openSUSE 11.4

Description The issue allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.

Recommendations For versions prior to 11.3-8.9.1 in SUSE openSUSE 11.3, update to version 11.3-8.9.1 or later. For versions prior to 11.4-54.62.1 in openSUSE 11.4, update to version 11.4-54.62.1 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-0468

Produtos afetados

Aaa Base

Referências · 9

• http://support.novell.com/security/cve/CVE-2011-0468.html · Nota
• http://lists.opensuse.org/opensuse-updates/2011-03/msg00010.html · Aviso do Fabricante
• http://securityfocus.com/bid/46983 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0468 · Nota de Segurança
• https://bugzilla.novell.com/678827 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Aviso do Fabricante
• http://secunia.com/advisories/43825 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66245 · Nota
• http://osvdb.org/71253 · Nota