openSUSE 'aaa_base' Package Tab Expansion Local Privilege-Escalation Vulnerability

Bugtraq ID:	46983
Class:	Input Validation Error
CVE:	CVE-2011-0468
Remote:	No
Local:	Yes
Published:	Mar 22 2011 12:00AM
Updated:	Mar 22 2011 12:00AM
Credit:	Reported by the vendor.
Vulnerable:
Not Vulnerable:

openSUSE 'aaa_base' Package Tab Expansion Local Privilege-Escalation Vulnerability

The openSUSE 'aaa_base' package is prone to a local privilege-escalation vulnerability.

Successfully exploiting this issue will allow an attacker to execute arbitrary commands with the privileges of the victim.

openSUSE 'aaa_base' Package Tab Expansion Local Privilege-Escalation Vulnerability

An attacker requires local interactive access to a vulnerable computer to exploit this issue.

openSUSE 'aaa_base' Package Tab Expansion Local Privilege-Escalation Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

openSUSE 'aaa_base' Package Tab Expansion Local Privilege-Escalation Vulnerability

References:

• Novell Homepage (Novell)
  
• openSUSE-SU-2011:0207-1 (moderate): aaa_base security update (Novell)