Lucene search

K
cveMitreCVE-2011-0461
HistoryApr 04, 2011 - 12:27 p.m.

CVE-2011-0461

2011-04-0412:27:36
CWE-59
mitre
web.nvd.nist.gov
31
cve-2011-0461
aaa_base
symlink attack
suse
opensuse 11.2
opensuse 11.3
mtab
security vulnerability
nvd

CVSS2

6.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

/etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.

Affected configurations

Nvd
Node
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
VendorProductVersionCPE
opensuseopensuse11.2cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
opensuseopensuse11.3cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

CVSS2

6.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2011-0461