CVEvulnerability
CVE-2009-1648
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-07-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-16
Description
The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services.
Affected configurations
• suse suse linux 11
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html Vendor Advisory
- http://secunia.com/advisories/35685 secunia.com
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html Vendor Advisory
- http://secunia.com/advisories/35685 secunia.com