CVEvulnerability

CVE-2011-0460

6.3 MEDIUM Published 2014-04-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-04-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.3 MEDIUM — AV:L/AC:M/Au:N/C:N/I:C/A:C
Weaknesses
CWE-59

Description

The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.

Affected configurations

• kbd-project kbd (<= 1.14.1) • kbd-project kbd 0.99 • kbd-project kbd 1.01 • kbd-project kbd 1.03 • kbd-project kbd 1.04 • kbd-project kbd 1.05 • kbd-project kbd 1.06 • kbd-project kbd 1.08 • kbd-project kbd 1.10 • kbd-project kbd 1.11 • kbd-project kbd 1.12 • kbd-project kbd 1.13 • kbd-project kbd 1.14 • opensuse opensuse 11.2 • opensuse opensuse 11.3

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References