Lucene search
HistoryMar 30, 2011 - 10:55 p.m.
CVE-2011-1551
cve-2011-1551
suse
opensuse factory
directory ownership
local privilege escalation
cobbler daemon
6.8 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
19.5%
SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.
Affected configurations
Node
novellopensuse_factory
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:opensuse_factory | novell opensuse factory | eq | * |
Related
nessus
nessus
openSUSE Security Update : cobbler (openSUSE-SU-2011:0277-1)
2014-06-13 00:00:00
cvelist
cvelist
CVE-2011-1551
2011-03-30 22:00:00
prion
prion
Directory traversal
2011-03-30 22:55:00
nvd
nvd
CVE-2011-1551
2011-03-30 22:55:02
ubuntucve
ubuntucve
CVE-2011-1551
2011-03-30 00:00:00
6.8 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
19.5%
Related for CVE-2011-1551