CVE-2011-0460 The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
MediumCVSS 6.3
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kbd-project kbd | <= 1.14.1 | No fix listed |
| kbd-project kbd | = 0.99 | No fix listed |
| kbd-project kbd | = 1.01 | No fix listed |
| kbd-project kbd | = 1.03 | No fix listed |
| kbd-project kbd | = 1.04 | No fix listed |
| kbd-project kbd | = 1.05 | No fix listed |
| kbd-project kbd | = 1.06 | No fix listed |
| kbd-project kbd | = 1.08 | No fix listed |
| kbd-project kbd | = 1.10 | No fix listed |
| kbd-project kbd | = 1.11 | No fix listed |
| kbd-project kbd | = 1.12 | No fix listed |
| kbd-project kbd | = 1.13 | No fix listed |
| kbd-project kbd | = 1.14 | No fix listed |
| opensuse | = 11.2 | No fix listed |
| opensuse | = 11.3 | No fix listed |
References
- openSUSE-SU-2011:0357 vendor-advisory
- bugzilla.novell.com
- Debian Security Tracker CVE-2011-0460 vendor-advisory