CVEvulnerability
CVE-2011-0468
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.
Affected configurations
• opensuse opensuse 11.3
• opensuse opensuse 11.4
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2011-03/msg00010.html Vendor Advisory
- http://secunia.com/advisories/43825 Vendor Advisory
- http://support.novell.com/security/cve/CVE-2011-0468.html support.novell.com
- http://www.osvdb.org/71253 www.osvdb.org
- http://www.securityfocus.com/bid/46983 www.securityfocus.com
- https://bugzilla.novell.com/678827 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66245 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2011-03/msg00010.html Vendor Advisory
- http://secunia.com/advisories/43825 Vendor Advisory
- http://support.novell.com/security/cve/CVE-2011-0468.html support.novell.com
- http://www.osvdb.org/71253 www.osvdb.org
- http://www.securityfocus.com/bid/46983 www.securityfocus.com
- https://bugzilla.novell.com/678827 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66245 exchange.xforce.ibmcloud.com