NVD

Id
8816  
Name
CVE-2011-1946  
Description
gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by leveraging access to two unprivileged user accounts, and running many processes under one of these accounts.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-07  
Modified Date
2011-07-08  
Seq
2011-1946  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50844 8816 CVE-2011-1946 [oss-security] 20110530 CVE request: libgnomesu privilege escalation  View
50845 8816 CVE-2011-1946 [oss-security] 20110531 Re: CVE request: libgnomesu privilege escalation  View
50846 8816 CVE-2011-1946 48035  View
50847 8816 CVE-2011-1946 libgnomesu-setuid-privilege-escalation(67720)  View
50848 8816 CVE-2011-1946 https://bugzilla.novell.com/show_bug.cgi?id=695627  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34363 JVNDB-2011-004605 libgnomesu の gnomesu-pam-backend における権限を取得される脆弱性 libgnomesu の gnomesu-pam-backend は、setgid または setuid 関数の違反において、エラーメッセージを印刷するが、エラーがないコードパスを続行するため、権限を取得される脆弱性が存在します。 CVE-2011-1946 49853 CVE-2011-1946 8816 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004605.html 2011-07-07 2012-03-27 View