PT-2010-1021 · Opie · Opie

Sebastian Krahmer · Published 2010-05-28 · Updated 2024-06-15 · CVE-2011-2490

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OPIE versions 2.4.1-test1 and earlier

Description The issue concerns a problem where the setuid system call's return value is not checked in opielogin.c, allowing local users to gain privileges under certain conditions. Additionally, there are multiple vulnerabilities in the OPIE package that can lead to breaches of confidentiality, integrity, and availability of protected information, potentially exploitable remotely.

Recommendations For OPIE versions 2.4.1-test1 and earlier, consider updating to a newer version that addresses the issue with the setuid system call and other vulnerabilities, although the specific fixed version is not provided. As a temporary workaround, restrict access to the opielogin functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

CWE-189

Related Identifiers

BDU:2015-02818

CVE-2011-2490

DSA-2281-1

OPENSUSE-SU-2024:10550-1

Affected Products

Opie

References · 21

• 🔥 http://openwall.com/lists/oss-security/2011/06/23/5 · Exploit
• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=698772 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/06/22/6 · Exploit
• http://secunia.com/advisories/39966 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02818 · Security Note
• https://hermes.opensuse.org/messages/10082052 · Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-2490 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2489 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1938 · Security Note
• https://bugzillafiles.novell.org/attachment.cgi?id=435901 · Patch
• http://secunia.com/advisories/45136 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10550-1 · Vendor Advisory
• https://hermes.opensuse.org/messages/10082068 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2490 · Security Note