CVEvulnerability
CVE-2011-2490
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
Affected configurations
• nrl opie (<= 2.4.1)
• nrl opie 2.2
• nrl opie 2.3
• nrl opie 2.4
• nrl opie 2.10
• nrl opie 2.11
• nrl opie 2.21
• nrl opie 2.22
• nrl opie 2.32
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345 Patch
- http://secunia.com/advisories/39966 Vendor Advisory
- http://secunia.com/advisories/45136 Vendor Advisory
- http://secunia.com/advisories/45448 secunia.com
- http://www.debian.org/security/2011/dsa-2281 www.debian.org
- http://www.openwall.com/lists/oss-security/2011/06/22/6 Exploit, Patch
- http://www.openwall.com/lists/oss-security/2011/06/23/5 Exploit, Patch
- http://www.securityfocus.com/bid/48390 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=698772 Exploit, Patch
- https://bugzillafiles.novell.org/attachment.cgi?id=435901 Patch
- https://hermes.opensuse.org/messages/10082052 hermes.opensuse.org
- https://hermes.opensuse.org/messages/10082068 hermes.opensuse.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345 Patch
- http://secunia.com/advisories/39966 Vendor Advisory
- http://secunia.com/advisories/45136 Vendor Advisory
- http://secunia.com/advisories/45448 secunia.com
- http://www.debian.org/security/2011/dsa-2281 www.debian.org
- http://www.openwall.com/lists/oss-security/2011/06/22/6 Exploit, Patch
- http://www.openwall.com/lists/oss-security/2011/06/23/5 Exploit, Patch
- http://www.securityfocus.com/bid/48390 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=698772 Exploit, Patch
- https://bugzillafiles.novell.org/attachment.cgi?id=435901 Patch
- https://hermes.opensuse.org/messages/10082052 hermes.opensuse.org
- https://hermes.opensuse.org/messages/10082068 hermes.opensuse.org