NVD

Id
9268  
Name
CVE-2011-2490  
Description
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-26  
Modified Date
2011-09-06  
Seq
2011-2490  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52979 9268 CVE-2011-2490 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345  View
52980 9268 CVE-2011-2490 DSA-2281  View
52981 9268 CVE-2011-2490 [oss-security] 20110622 CVE requests: opie off by one and setuid() failure  View
52982 9268 CVE-2011-2490 [oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure  View
52983 9268 CVE-2011-2490 48390  View
52984 9268 CVE-2011-2490 https://bugzilla.novell.com/show_bug.cgi?id=698772  View
52985 9268 CVE-2011-2490 https://bugzillafiles.novell.org/attachment.cgi?id=435901  View
52986 9268 CVE-2011-2490 openSUSE-SU-2011:0848  View
52987 9268 CVE-2011-2490 SUSE-SU-2011:0849  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34477 JVNDB-2011-004719 OPIE の opielogin.c における権限を取得される脆弱性 OPIE の opielogin の opielogin.c は、setuid システム呼び出しの返り値をチェックしないため、権限を取得される脆弱性が存在します。 CVE-2011-2490 50397 CVE-2011-2490 9268 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004719.html 2011-07-26 2012-03-27 View