Lucene search
HistoryApr 16, 2014 - 6:37 p.m.
CVE-2011-0460
init script
kbd
local users
symlink attack
security vulnerability
nvd
cve-2011-0460
6.4 Medium
AI Score
Confidence
Low
6.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
Affected configurations
Node
kbd-projectkbdRange≤1.14.1
ORkbd-projectkbdMatch0.99
ORkbd-projectkbdMatch1.01
ORkbd-projectkbdMatch1.03
ORkbd-projectkbdMatch1.04
ORkbd-projectkbdMatch1.05
ORkbd-projectkbdMatch1.06
ORkbd-projectkbdMatch1.08
ORkbd-projectkbdMatch1.10
ORkbd-projectkbdMatch1.11
ORkbd-projectkbdMatch1.12
ORkbd-projectkbdMatch1.13
ORkbd-projectkbdMatch1.14
ORopensuseopensuseMatch11.2
ORopensuseopensuseMatch11.3
Related
ubuntucve
ubuntucve
CVE-2011-0460
2014-04-16 00:00:00
debiancve
debiancve
CVE-2011-0460
2014-04-16 18:37:09
nvd
nvd
CVE-2011-0460
2014-04-16 18:37:09
prion
prion
Code injection
2014-04-16 18:37:00
nessus
nessus
openSUSE Security Update : kbd (openSUSE-SU-2011:0357-1)
2011-05-05 00:00:00
SuSE 11.1 Security Update : kbd (SAT Patch Number 3825)
2011-04-19 00:00:00
openSUSE Security Update : kbd (openSUSE-SU-2011:0357-1)
2014-06-13 00:00:00
cvelist
cvelist
CVE-2011-0460
2014-04-16 18:00:00
6.4 Medium
AI Score
Confidence
Low
6.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2011-0460