Lucene search

[email protected]CVE-2011-0988

HistoryApr 18, 2011 - 5:55 p.m.

CVE-2011-0988

2011-04-1817:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2011-0988

pure-ftpd

suse linux

vulnerability

nvd

6.7 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.8%

JSON

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.

CPENameOperatorVersion
novell:suse_linuxnovell suse linuxeq10
novell:suse_linuxnovell suse linuxeq11
pureftpd:pure-ftpdpureftpd pure-ftpdeq1.0.22

CPE	Name	Operator	Version
novell:suse_linux	novell suse linux	eq	10
novell:suse_linux	novell suse linux	eq	11
pureftpd:pure-ftpd	pureftpd pure-ftpd	eq	1.0.22

References

secunia.com/advisories/44039

exchange.xforce.ibmcloud.com/vulnerabilities/66618

hermes.opensuse.org/messages/7849430

6.7 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.8%

JSON

Related for CVE-2011-0988

ubuntucve1 nessus2 debiancve1 prion1