CVEvulnerability
CVE-2011-0988
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.
Affected configurations
• pureftpd pure-ftpd 1.0.22
• novell suse linux 10
• novell suse linux 11
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/44039 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66618 exchange.xforce.ibmcloud.com
- https://hermes.opensuse.org/messages/7849430 hermes.opensuse.org
- http://secunia.com/advisories/44039 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66618 exchange.xforce.ibmcloud.com
- https://hermes.opensuse.org/messages/7849430 hermes.opensuse.org