{"id": "CVE-2011-0988", "bulletinFamily": "NVD", "title": "CVE-2011-0988", "description": "pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.", "published": "2011-04-18T17:55:00", "modified": "2017-08-17T01:33:00", "cvss": {"score": 4.4, "vector": "AV:L/AC:M/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0988", "reporter": "cve@mitre.org", "references": ["https://hermes.opensuse.org/messages/7849430", "http://secunia.com/advisories/44039", "https://exchange.xforce.ibmcloud.com/vulnerabilities/66618"], "cvelist": ["CVE-2011-0988"], "type": "cve", "lastseen": "2019-05-29T18:11:07", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "495c8a9aecf5e7f6f1e72e7d65ebc0c6"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "76b2125e7b9903c5dd8d11fcdbeecc52"}, {"key": "cpe23", "hash": "8f1e6485fb42590f8ec245ee9c37ba44"}, {"key": "cvelist", "hash": "b847abb72d9026b9f33ba48ad7b9d000"}, {"key": "cvss", "hash": "6e73efcf92f1a3886b408b405fd39a25"}, {"key": "cvss2", "hash": "34bb1e80f5f3e7df99e85aaf2376988a"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "fa12e087f68642fcaefafba0d4583885"}, {"key": "description", "hash": "3eeeb6fd25783b77f3b056e0df8676ef"}, {"key": "href", "hash": "b7d95747d780180963efa1c940f53d5c"}, {"key": "modified", "hash": "2cf13683885aa7b0ea5a410a4be7d5dc"}, {"key": "published", "hash": "8702c07cc81f0362ae4cee16d31619a3"}, {"key": "references", "hash": "e62a9f4da598c5d57d11c4588a71e923"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "49b2cbcbd61b80f5484e1349817c12d7"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "4f41f465f5975299032c14ed4cecd00d2966da64bb35d2c670733442028635fb", "viewCount": 0, "enchantments": {"score": {"value": 5.6, "vector": "NONE", "modified": "2019-05-29T18:11:07"}, "dependencies": {"references": [{"type": "nessus", "idList": ["SUSE_PURE-FTPD-7428.NASL", "SUSE_PURE-FTPD-7426.NASL"]}], "modified": "2019-05-29T18:11:07"}, "vulnersScore": 5.6}, "objectVersion": "1.3", "cpe": ["cpe:/o:novell:suse_linux:11", "cpe:/a:pureftpd:pure-ftpd:1.0.22", "cpe:/o:novell:suse_linux:10", "cpe:/a:novell:suse_linux:10", "cpe:/a:novell:suse_linux:11"], "affectedSoftware": [{"name": "novell suse_linux", "operator": "eq", "version": "10"}, {"name": "pureftpd pure-ftpd", "operator": "eq", "version": "1.0.22"}, {"name": "novell suse_linux", "operator": "eq", "version": "11"}], "cvss2": {"cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:o:novell:suse_linux:11:sp3:desktop:*:*:*:*:*", "cpe:2.3:a:pureftpd:pure-ftpd:1.0.22:*:*:*:*:*:*:*", "cpe:2.3:o:novell:suse_linux:11:sp4:desktop:*:*:*:*:*", "cpe:2.3:o:novell:suse_linux:10:sp3:*:*:*:*:*:*", "cpe:2.3:o:novell:suse_linux:10:sp4:*:*:*:*:*:*"], "cwe": ["CWE-264"]}

{"nessus": [{"lastseen": "2019-02-21T01:14:44", "bulletinFamily": "scanner", "description": "pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch :\n\n - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. (CVE-2011-0988)", "modified": "2012-05-17T00:00:00", "id": "SUSE_PURE-FTPD-7428.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=53318", "published": "2011-04-07T00:00:00", "title": "SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7428)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The text description of this plugin is (C) Novell, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(53318);\n script_version (\"$Revision: 1.5 $\");\n script_cvs_date(\"$Date: 2012/05/17 11:20:15 $\");\n\n script_cve_id(\"CVE-2011-0988\");\n\n script_name(english:\"SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7428)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SuSE 10 host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"pure-ftpd was updated to fix a security issue with an Open Enterprise\nServer specific patch :\n\n - A worldwriteable directory created and used by the OES\n pure-ftpd Netware extensions could be used by local\n attackers to overwrite system files and so gain\n privileges. (CVE-2011-0988)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://support.novell.com/security/cve/CVE-2011-0988.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Apply ZYPP patch number 7428.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:suse:suse_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/03/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/04/07\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2012 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) exit(0, \"Local checks are not enabled.\");\nif (!get_kb_item(\"Host/SuSE/release\")) exit(0, \"The host is not running SuSE.\");\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) exit(1, \"Could not obtain the list of installed packages.\");\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) exit(1, \"Failed to determine the architecture type.\");\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") exit(1, \"Local checks for SuSE 10 on the '\"+cpu+\"' architecture have not been implemented.\");\n\n\nflag = 0;\nif (rpm_check(release:\"SLED10\", sp:3, reference:\"pure-ftpd-1.0.22-0.18.1\")) flag++;\nif (rpm_check(release:\"SLES10\", sp:3, reference:\"pure-ftpd-1.0.22-0.18.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse exit(0, \"The host is not affected.\");\n", "cvss": {"score": 4.4, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-02-21T01:15:46", "bulletinFamily": "scanner", "description": "pure-ftpd was updated to fix a security issue with an Open Enterprise Server specific patch :\n\n - A worldwriteable directory created and used by the OES pure-ftpd Netware extensions could be used by local attackers to overwrite system files and so gain privileges. (CVE-2011-0988)", "modified": "2012-05-17T00:00:00", "id": "SUSE_PURE-FTPD-7426.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=57245", "published": "2011-12-13T00:00:00", "title": "SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7426)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The text description of this plugin is (C) Novell, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(57245);\n script_version (\"$Revision: 1.2 $\");\n script_cvs_date(\"$Date: 2012/05/17 11:20:15 $\");\n\n script_cve_id(\"CVE-2011-0988\");\n\n script_name(english:\"SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7426)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote SuSE 10 host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"pure-ftpd was updated to fix a security issue with an Open Enterprise\nServer specific patch :\n\n - A worldwriteable directory created and used by the OES\n pure-ftpd Netware extensions could be used by local\n attackers to overwrite system files and so gain\n privileges. (CVE-2011-0988)\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://support.novell.com/security/cve/CVE-2011-0988.html\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Apply ZYPP patch number 7426.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:suse:suse_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/03/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/12/13\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2012 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) exit(0, \"Local checks are not enabled.\");\nif (!get_kb_item(\"Host/SuSE/release\")) exit(0, \"The host is not running SuSE.\");\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) exit(1, \"Could not obtain the list of installed packages.\");\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) exit(1, \"Failed to determine the architecture type.\");\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") exit(1, \"Local checks for SuSE 10 on the '\"+cpu+\"' architecture have not been implemented.\");\n\n\nflag = 0;\nif (rpm_check(release:\"SLED10\", sp:4, reference:\"pure-ftpd-1.0.22-0.18.1\")) flag++;\nif (rpm_check(release:\"SLES10\", sp:4, reference:\"pure-ftpd-1.0.22-0.18.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());\n else security_warning(0);\n exit(0);\n}\nelse exit(0, \"The host is not affected.\");\n", "cvss": {"score": 4.4, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}