SUSE: Security Advisory for novell-qtgui (SUSE-SU-2014:0847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.3 Security Update : novell-qtgui, novell-ui-base (SAT Patch Number 9276)

Packages novell-ui-base and novell-qtgui were updated to prevent erroneous rights assignment when a user is granted 'File Scan' rights F. In this case nwrights was assigning Supervisor S rights. CVE-2014-0595 Further information is available at https://bugzilla.novell.com/showbug.cgi?id=872796...

CVE-2014-0595

CVE-2014-0595 affects /opt/novell/ncl/bin/nwrights in Novell Client for Linux used with Novell Open Enterprise Server 11 Linux SP2. The flaw stems from improper management of an internal array, enabling local users to obtain S-level (Supervisor) rights in opportunistic circumstances when an admin...