CVE

Id
50402  
CVE No.
CVE-2011-2490  
Status
Candidate  
Description
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544831 50402 CVE-2011-2490 MLIST:[oss-security] 20110622 CVE requests: opie off by one and setuid() failure  View
544832 50402 CVE-2011-2490 URL:http://www.openwall.com/lists/oss-security/2011/06/22/6  View
544833 50402 CVE-2011-2490 MLIST:[oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure  View
544834 50402 CVE-2011-2490 URL:http://www.openwall.com/lists/oss-security/2011/06/23/5  View
544835 50402 CVE-2011-2490 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345  View
544836 50402 CVE-2011-2490 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=698772  View
544837 50402 CVE-2011-2490 CONFIRM:https://bugzillafiles.novell.org/attachment.cgi?id=435901  View
544838 50402 CVE-2011-2490 DEBIAN:DSA-2281  View
544839 50402 CVE-2011-2490 URL:http://www.debian.org/security/2011/dsa-2281  View
544840 50402 CVE-2011-2490 SUSE:SUSE-SU-2011:0849  View
544841 50402 CVE-2011-2490 URL:https://hermes.opensuse.org/messages/10082068  View
544842 50402 CVE-2011-2490 SUSE:openSUSE-SU-2011:0848  View
544843 50402 CVE-2011-2490 URL:https://hermes.opensuse.org/messages/10082052  View
544844 50402 CVE-2011-2490 BID:48390  View
544845 50402 CVE-2011-2490 URL:http://www.securityfocus.com/bid/48390  View
544846 50402 CVE-2011-2490 SECUNIA:39966  View
544847 50402 CVE-2011-2490 URL:http://secunia.com/advisories/39966  View
544848 50402 CVE-2011-2490 SECUNIA:45136  View
544849 50402 CVE-2011-2490 URL:http://secunia.com/advisories/45136  View
544850 50402 CVE-2011-2490 SECUNIA:45448  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27005 JVNDB-2012-002712 Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性 Linux Kernel の fs/proc/base.c は、/proc/#####/io ファイルへのアクセスを適切に制限しないため、重要な I/O 統計を取得される脆弱性が存在します。 CVE-2011-2495 50402 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002712.html  View