CVE-2011-2490 opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already b...
HighCVSS 7.2
EPSS 0.53%
- Published
- Updated
- Exploit status
- No public exploit known
Description
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nrl opie | <= 2.4.1 | No fix listed |
| nrl opie | = 2.2 | No fix listed |
| nrl opie | = 2.3 | No fix listed |
| nrl opie | = 2.4 | No fix listed |
| nrl opie | = 2.10 | No fix listed |
| nrl opie | = 2.11 | No fix listed |
| nrl opie | = 2.21 | No fix listed |
| nrl opie | = 2.22 | No fix listed |
| nrl opie | = 2.32 | No fix listed |
References
- bugs.debian.org patch
- 39966 third-party-advisory vendor-advisory
- 45136 third-party-advisory vendor-advisory
- 45448 third-party-advisory
- DSA-2281 vendor-advisory
- [oss-security] 20110622 CVE requests: opie off by one and setuid() failure exploit mailing-list patch
- [oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure exploit mailing-list patch
- 48390 vdb-entry
- bugzilla.novell.com exploit patch
- bugzillafiles.novell.org patch
- openSUSE-SU-2011:0848 vendor-advisory
- SUSE-SU-2011:0849 vendor-advisory