SUSE Pure-FTPd Local Insecure File Permissions Vulnerability
BID:47425
Info
SUSE Pure-FTPd Local Insecure File Permissions Vulnerability
| Bugtraq ID: | 47425 |
| Class: | Design Error |
| CVE: |
CVE-2011-0988 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 19 2011 12:00AM |
| Updated: | Mar 19 2015 09:49AM |
| Credit: | This issue was disclosed in a SUSE advisory. |
| Vulnerable: |
SuSE SUSE Linux Enterprise 10 SP4 SuSE SUSE Linux Enterprise 10 SP3 Pure-FTPd Pure-FTPd for SUSE 0 |
| Not Vulnerable: | |
Discussion
SUSE Pure-FTPd Local Insecure File Permissions Vulnerability
Pure-FTPd in SUSE is prone to a local insecure-file-permissions vulnerability.
A local attacker can exploit this issue to overwrite certain files. This may lead to privilege escalation; other attacks may also be possible.
Pure-FTPd in SUSE is prone to a local insecure-file-permissions vulnerability.
A local attacker can exploit this issue to overwrite certain files. This may lead to privilege escalation; other attacks may also be possible.
Exploit / POC
SUSE Pure-FTPd Local Insecure File Permissions Vulnerability
A local attacker can use readily available tools to exploit this issue.
A local attacker can use readily available tools to exploit this issue.
Solution / Fix
SUSE Pure-FTPd Local Insecure File Permissions Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
SUSE Pure-FTPd Local Insecure File Permissions Vulnerability
References:
References:
- Vulnerability Summary for CVE-2011-0988 (US-CERT/)