CVE-2007-6167

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory...

CVE-2007-6167: Undefined Security Weakness

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory...

openSUSE 10 Security Update : yast2-core (yast2-core-4634)

This update fixes a security bug in yast2-core that allowed local attackers to provide malicious yast2 modules to yast2 that are executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. Thanks to Stefan Nordhausen for reporting th...

PT-2008-6959 · Suse · Yast2-Backup

Name of the Vulnerable Software and Affected Versions: yast2-backup versions 2.14.2 through 2.16.6 Description: The issue allows local users to gain privileges via shell metacharacters in filenames used by the backup process, potentially leading to a violation of confidentiality, integrity, and...