CVE-2011-1011
Summary
| CVE | CVE-2011-1011 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-02-24 21:00:18 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:L/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Redhat | Enterprise Linux | 3 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 4 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 5 | All | All | All |
| Operating System | Redhat | Enterprise Linux | 6.0 | All | All | All |
| Operating System | Redhat | Fedora | 10 | All | All | All |
| Operating System | Redhat | Fedora | 12 | All | All | All |
| Operating System | Redhat | Fedora | 13 | All | All | All |
| Operating System | Redhat | Fedora | 14 | All | All | All |
| Operating System | Redhat | Fedora | 6 | All | All | All |
| Operating System | Redhat | Fedora | 7 | All | All | All |
| Operating System | Redhat | Fedora | 8 | All | All | All |
| Operating System | Redhat | Fedora | 9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.0 | All | All | All |
| Application | Redhat | Policycoreutils | 1.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.12 | All | All | All |
| Application | Redhat | Policycoreutils | 1.14 | All | All | All |
| Application | Redhat | Policycoreutils | 1.16 | All | All | All |
| Application | Redhat | Policycoreutils | 1.18 | All | All | All |
| Application | Redhat | Policycoreutils | 1.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.20 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.11 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.12 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.13 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.14 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.15 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.16 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.17 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.18 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.19 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.20 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.21 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.22 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.21.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.22 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.11 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.23.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.24 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.25.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.26 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.11 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.12 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.13 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.14 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.15 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.16 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.17 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.18 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.19 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.20 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.21 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.22 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.23 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.24 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.25 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.26 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.27 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.28 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.29 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.30 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.31 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.32 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.33 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.34 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.35 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.36 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.37 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.27.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.28 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.11 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.12 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.13 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.14 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.15 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.16 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.17 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.18 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.19 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.20 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.21 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.22 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.23 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.24 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.25 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.26 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.27 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.28 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.29.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.11 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.12 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.13 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.14 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.15 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.16 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.17 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.18 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.19 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.20 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.21 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.22 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.23 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.24 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.25 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.26 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.27 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.28 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.29 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.30 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.31 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.30.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.32 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.10 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.11 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.12 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.13 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.14 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.15 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.16 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.2 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.3 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.5 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.7 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.8 | All | All | All |
| Application | Redhat | Policycoreutils | 1.33.9 | All | All | All |
| Application | Redhat | Policycoreutils | 1.34.0 | All | All | All |
| Application | Redhat | Policycoreutils | 1.34.1 | All | All | All |
| Application | Redhat | Policycoreutils | 1.4 | All | All | All |
| Application | Redhat | Policycoreutils | 1.6 | All | All | All |
| Application | Redhat | Policycoreutils | 1.8 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.0 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.1 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.10 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.11 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.12 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.13 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.14 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.15 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.16 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.17 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.18 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.19 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.2 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.20 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.21 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.22 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.23 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.24 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.25 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.26 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.27 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.28 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.29 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.3 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.30 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.31 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.32 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.33 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.34 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.35 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.36 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.37 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.38 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.39 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.4 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.40 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.41 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.42 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.43 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.44 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.45 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.46 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.47 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.48 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.49 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.5 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.50 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.51 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.52 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.53 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.54 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.55 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.56 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.57 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.58 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.59 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.6 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.60 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.61 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.62 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.63 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.64 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.65 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.66 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.67 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.68 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.69 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.7 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.70 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.71 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.72 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.73 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.74 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.75 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.76 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.77 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.78 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.79 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.8 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.80 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.81 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.82 | All | All | All |
| Application | Redhat | Policycoreutils | 2.0.9 | All | All | All |
| Application | Redhat | Policycoreutils | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - CVE Request | af854a3a-2127-422b-91ae-364da2661108 | openwall.com | |
| Red Hat update for policycoreutils - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| policycoreutils 'seunshare' Directory Permission Settings Lets Local Users Gain Elevated Privileges - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| [SECURITY] Fedora 14 Update: policycoreutils-2.0.85-19.fc14 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| policycoreutils "seunshare" Temporary Directory Security Bypass Weakness - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| oss-security - Re: CVE Request | af854a3a-2127-422b-91ae-364da2661108 | openwall.com | |
| policycoreutils 'seunshare' Insecure Temporary Directory Creation Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| NEOHAPSIS - Peace of Mind Through Integrity and Insight | af854a3a-2127-422b-91ae-364da2661108 | archives.neohapsis.com | |
| Bug 633544 – CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Patch |
| Fedora update for policycoreutils - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Page not found :'( - src.fedoraproject.org | af854a3a-2127-422b-91ae-364da2661108 | pkgs.fedoraproject.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Page not found :'( - src.fedoraproject.org | MITRE | pkgs.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.