NVD

Id
17961  
Name
CVE-2016-1611  
Description
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file"s content with arbitrary shell commands.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-07-31  
Modified Date
2016-11-28  
Seq
2016-1611  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98307 17961 CVE-2016-1611 20160725 SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr  View
98308 17961 CVE-2016-1611 92113  View
98309 17961 CVE-2016-1611 https://www.novell.com/support/kb/doc.php?id=7017689  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3343 JVNDB-2016-004116 Novell Filr における権限を取得される脆弱性 Novell Filr は、/etc/profile.d/vainit.sh に誰でも書き込み可能な (world-writable) パーミッションを使用するため、権限を取得される脆弱性が存在します。 CVE-2016-1611 88117 CVE-2016-1611 17961 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004116.html 2016-06-09 2016-08-02 View