CVE-2011-1551

Summary

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://openwall.com/lists/oss-security/2011/03/23/11
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66487

References

• http://openwall.com/lists/oss-security/2011/03/23/11
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66487

• ←Previous
• Next→