CVE-2011-2490

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345	Patch
http://secunia.com/advisories/39966	Vendor Advisory
http://secunia.com/advisories/45136	Vendor Advisory
http://secunia.com/advisories/45448
http://www.debian.org/security/2011/dsa-2281
http://www.openwall.com/lists/oss-security/2011/06/22/6	Exploit Patch
http://www.openwall.com/lists/oss-security/2011/06/23/5	Exploit Patch
http://www.securityfocus.com/bid/48390
https://bugzilla.novell.com/show_bug.cgi?id=698772	Exploit Patch
https://bugzillafiles.novell.org/attachment.cgi?id=435901	Patch
https://hermes.opensuse.org/messages/10082052
https://hermes.opensuse.org/messages/10082068

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nrl:opie::test1::::::*
	cpe:2.3:a:nrl:opie:2.2:::::::*
	cpe:2.3:a:nrl:opie:2.3:::::::*
	cpe:2.3:a:nrl:opie:2.4:::::::*
	cpe:2.3:a:nrl:opie:2.10:::::::*
	cpe:2.3:a:nrl:opie:2.11:::::::*
	cpe:2.3:a:nrl:opie:2.21:::::::*
	cpe:2.3:a:nrl:opie:2.22:::::::*
	cpe:2.3:a:nrl:opie:2.32:::::::*

History

No history.

Information

Published : 2011-07-27 02:55

Updated : 2024-02-28 11:41

NVD link : CVE-2011-2490

Mitre link : CVE-2011-2490

CVE.ORG link : CVE-2011-2490

JSON object : View

Products Affected

nrl

opie

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2011-2490", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-07-27T02:55:02.087", "references": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/39966", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/45136", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/45448", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2011/dsa-2281", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2011/06/22/6", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2011/06/23/5", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/48390", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=698772", "tags": ["Exploit", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "https://hermes.opensuse.org/messages/10082052", "source": "secalert@redhat.com"}, {"url": "https://hermes.opensuse.org/messages/10082068", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."}, {"lang": "es", "value": "opielogin.c de opielogin de OPIE 2.4.1-test1 y versiones anteriores no comprueba el valor de retorno de la llamada al sistema setuid, lo que permite a usuarios locales escalar privilegios disponiendo de una cuenta que ya est\u00e9 ejecutando su n\u00famero m\u00e1ximo de procesos."}], "lastModified": "2011-09-07T03:17:30.207", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEEC73FC-2BB6-4B8F-9596-BBB287AFFDA2", "versionEndIncluding": "2.4.1"}, {"criteria": "cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D33B387-8EE6-4F36-A4B5-509FF8DA8C1E"}, {"criteria": "cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9B3734D-F6CB-4242-92FA-EDF425CCBCEF"}, {"criteria": "cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2B076A0-0216-4A52-ABA6-2E511FB6DB5E"}, {"criteria": "cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32B7BBAB-609B-4D4D-BF5A-C4E95F0A8C51"}, {"criteria": "cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5889C86D-4285-4B22-B3F0-76984D8CEC4B"}, {"criteria": "cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0779EF0-9638-474E-9EF2-971ADA10F1D9"}, {"criteria": "cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AEB7E9A-3F68-4F20-A073-751A76452C67"}, {"criteria": "cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9A53F58-7514-4B07-AC56-C6F928F9D3F3"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}