Ubuntu.comUB:CVE-2011-3351CVE-2011-3351
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:C/A:C
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
openvas-scanner before 2011-09-11 creates a temporary file insecurely when
generating OVAL system characteristics document with the ovaldi integrated
tool enabled. A local attacker could use this flaw to conduct symlink
attacks to overwrite arbitrary files on the system.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641327>
- <https://bugzilla.redhat.com/show_bug.cgi?id=736317>
Notes
| Author | Note |
|---|---|
| tyhicks | Several mitigating factors here: Yama’s symlink protection (10.10 and newer), requires non-standard configuration, and a openvas plugin that is not available in the archive |
Related
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:C/A:C
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%