Red Hat 'virt-v2v' Package Local Privilege Escalation Vulnerability

Bugtraq ID:	50934
Class:	Design Error
CVE:	CVE-2011-1773
Remote:	No
Local:	Yes
Published:	Dec 06 2011 12:00AM
Updated:	Jan 11 2012 12:50AM
Credit:	Red Hat
Vulnerable:	Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop 6
Not Vulnerable:

Red Hat 'virt-v2v' Package Local Privilege Escalation Vulnerability

Red Hat 'virt-v2v' package is prone to a local privilege-escalation vulnerability.

Local attackers may exploit this issue to gain elevated-privileges.

Red Hat 'virt-v2v' Package Local Privilege Escalation Vulnerability

An attacker requires local interactive access to exploit this issue.

Red Hat 'virt-v2v' Package Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Red Hat 'virt-v2v' Package Local Privilege Escalation Vulnerability

References:

• Red Hat Homepage (Red Hat)
  
• Bug 702754 - (CVE-2011-1773) CVE-2011-1773 virt-v2v: vnc password protection is (Red Hat)
  
• RHSA-2011:1615-3 virt-v2v security and bug fix update (Red Hat)