CVE-2011-1551

N/A

Descricao

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado3/30/2011

Ultima modificacao4/29/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

novell:opensuse_factory

Fraquezas (CWE)

CWE-264

Referencias

http://openwall.com/lists/oss-security/2011/03/23/11(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/66487(cve@mitre.org)

http://openwall.com/lists/oss-security/2011/03/23/11(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/66487(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.