PT-2011-2368 · Suse · Aaa Base

Published 2011-04-01 · Updated 2018-10-30 · CVE-2011-0468

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions aaa base versions prior to 11.3-8.9.1 in SUSE openSUSE 11.3 aaa base versions prior to 11.4-54.62.1 in openSUSE 11.4

Description The issue allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.

Recommendations For versions prior to 11.3-8.9.1 in SUSE openSUSE 11.3, update to version 11.3-8.9.1 or later. For versions prior to 11.4-54.62.1 in openSUSE 11.4, update to version 11.4-54.62.1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0468

Affected Products

Aaa Base

References · 9

• http://lists.opensuse.org/opensuse-updates/2011-03/msg00010.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0468 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Vendor Advisory
• http://secunia.com/advisories/43825 · Vendor Advisory
• http://support.novell.com/security/cve/CVE-2011-0468.html · Note
• http://securityfocus.com/bid/46983 · Note
• https://bugzilla.novell.com/678827 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66245 · Note
• http://osvdb.org/71253 · Note