PT-2005-2062 · Novell · Novell Linux Desktop 9

Published 2005-04-10 · Updated 2008-09-05 · CVE-2005-1040

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Linux Desktop 9

Description The issue is related to user input being passed to network scripts without verification in the netapplet component, allowing local users to gain root privileges.

Recommendations For Novell Linux Desktop 9, consider restricting access to the netapplet component until a fix is available, and ensure that all user input is properly verified before being passed to network scripts.

Fix

Related Identifiers

CVE-2005-1040

Affected Products

Novell Linux Desktop 9

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-1040 · Security Note
• http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html · Vendor Advisory