CVE

Id
48373  
CVE No.
CVE-2011-0461  
Status
Candidate  
Description
/etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.  
Phase
Assigned (20110114)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525290 48373 CVE-2011-0461 MLIST:[opensuse-updates] 20110314 openSUSE-SU-2011:0171-1 (moderate): aaa_base security update  View
525291 48373 CVE-2011-0461 URL:http://lists.opensuse.org/opensuse-updates/2011-03/msg00007.html  View
525292 48373 CVE-2011-0461 CONFIRM:http://support.novell.com/security/cve/CVE-2011-0461.html  View
525293 48373 CVE-2011-0461 CONFIRM:https://bugzilla.novell.com/665479  View
525294 48373 CVE-2011-0461 SUSE:SUSE-SR:2011:005  View
525295 48373 CVE-2011-0461 URL:http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html  View
525296 48373 CVE-2011-0461 SUSE:SUSE-SR:2011:009  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33889 JVNDB-2011-004131 SUSE OBS の API におけるパッケージまたはプロジェクトの書き込みアクセス制限を回避する脆弱性 SUSE openSUSE Build Service (OBS) の API には、パッケージまたはプロジェクトの書き込みアクセス制限を回避、変更される脆弱性が存在します。 CVE-2011-0466 48373 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004131.html  View