CVE-2011-0988

2011-04-18T13:55:01
ID CVE-2011-0988
Type cve
Reporter NVD
Modified 2017-08-16T21:33:45

Description

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.