Lucene search
+L

Mandriva Update for libcap MDVSA-2011:185 (libcap)

🗓️ 16 Dec 2011 00:00:00Reported by Copyright (C) 2011 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 23 Views

Mandatory update for libcap package in Mandriva Linux 2010.1 and Mandriva Enterprise Server 5 addresses a vulnerability that could allow programs to access the current directory outside of the chroot

Related
Refs
Code
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2011-4099
8 Feb 201400:00
cve
cvelist
Cvelist
CVE-2011-4099
8 Feb 201400:00
cvelist
debiancve
Debian CVE
CVE-2011-4099
8 Feb 201400:00
debiancve
oraclelinux
Oracle linux
libcap security and bug fix update
14 Dec 201100:00
oraclelinux
euvd
EUVD
EUVD-2011-4050
7 Oct 202500:30
euvd
f5
F5 Networks
K16880: Libcap vulnerability CVE-2011-4099
21 Feb 202318:26
f5
f5
F5 Networks
SOL16880 - Libcap vulnerability CVE-2011-4099
2 Jul 201500:00
f5
nessus
Tenable Nessus
Mandriva Linux Security Advisory : libcap (MDVSA-2011:185)
13 Dec 201100:00
nessus
nessus
Tenable Nessus
MiracleLinux 4 : libcap-2.16-5.5.AXS4 (AXSA:2012-32:01)
14 Jan 202600:00
nessus
nessus
Tenable Nessus
Oracle Linux 6 : libcap (ELSA-2011-1694)
7 Sep 202300:00
nessus
Rows per page
# SPDX-FileCopyrightText: 2011 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_xref(name:"URL", value:"http://lists.mandriva.com/security-announce/2011-12/msg00007.php");
  script_oid("1.3.6.1.4.1.25623.1.0.831507");
  script_version("2026-04-24T15:56:23+0000");
  script_tag(name:"last_modification", value:"2026-04-24 15:56:23 +0000 (Fri, 24 Apr 2026)");
  script_tag(name:"creation_date", value:"2011-12-16 11:14:22 +0530 (Fri, 16 Dec 2011)");
  script_tag(name:"cvss_base", value:"4.6");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:P/I:P/A:P");
  script_xref(name:"MDVSA", value:"2011:185");
  script_cve_id("CVE-2011-4099");
  script_name("Mandriva Update for libcap MDVSA-2011:185 (libcap)");

  script_tag(name:"summary", value:"The remote host is missing an update for the 'libcap'
  package(s) announced via the referenced advisory.");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2011 Greenbone AG");
  script_family("Mandrake Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/mandriva_mandrake_linux", "ssh/login/release", re:"ssh/login/release=MNDK_(mes5|2010\.1)");
  script_tag(name:"affected", value:"libcap on Mandriva Linux 2010.1,
  Mandriva Linux 2010.1/X86_64,
  Mandriva Enterprise Server 5,
  Mandriva Enterprise Server 5/X86_64");
  script_tag(name:"insight", value:"A vulnerability has been discovered and corrected in libcap
  capsh did not chdir(/) after calling chroot(). Programs could
  therefore access the current directory outside of the chroot
  (CVE-2011-4099).

  The updated packages have been patched to correct this issue.");
  script_tag(name:"solution", value:"Please Install the Updated Packages.");
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

release = rpm_get_ssh_release();
if(!release) exit(0);

res = "";

if(release == "MNDK_mes5")
{

  if ((res = isrpmvuln(pkg:"libcap2", rpm:"libcap2~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"libcap-devel", rpm:"libcap-devel~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"libcap-utils", rpm:"libcap-utils~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"pam_cap", rpm:"pam_cap~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"libcap", rpm:"libcap~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"lib64cap2", rpm:"lib64cap2~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"lib64cap-devel", rpm:"lib64cap-devel~2.10~1.2mdvmes5.2", rls:"MNDK_mes5")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}


if(release == "MNDK_2010.1")
{

  if ((res = isrpmvuln(pkg:"libcap2", rpm:"libcap2~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"libcap-devel", rpm:"libcap-devel~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"libcap-utils", rpm:"libcap-utils~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"pam_cap", rpm:"pam_cap~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"libcap", rpm:"libcap~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"lib64cap2", rpm:"lib64cap2~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"lib64cap-devel", rpm:"lib64cap-devel~2.19~5.1mdv2010.2", rls:"MNDK_2010.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Apr 2026 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 24.6
EPSS0.00382
23