Open redirect

2014-05-0810:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.9%

JSON

/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 does not properly manage a certain array, which allows local users to obtain the S permission in opportunistic circumstances by leveraging the granting of the F permission by an administrator.

CPENameOperatorVersion
open_enterprise_servereq11.0 sp2

CPE	Name	Operator	Version
	open_enterprise_server	eq	11.0 sp2

References

lists.opensuse.org/opensuse-security-announce/2014-06/msg00030.html

www.novell.com/support/kb/doc.php?id=7014932

www.securityfocus.com/bid/67144