CVE-2011-4144

Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "highest super user privileges" by leveraging system administrator privileges.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 3.1 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html
http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:emc:documentum_content_server:6.0:::::::*
	cpe:2.3:a:emc:documentum_content_server:6.5:::::::*
	cpe:2.3:a:emc:documentum_content_server:6.5:sp1::::::
	cpe:2.3:a:emc:documentum_content_server:6.5:sp2::::::
	cpe:2.3:a:emc:documentum_content_server:6.5:sp3::::::
	cpe:2.3:a:emc:documentum_content_server:6.6:::::::*

Configuration 2 (hide)

cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*

History

21 Nov 2024, 01:31

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html -~~	() http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html -

Information

Published : 2012-02-02 04:09

Updated : 2024-11-21 01:31

NVD link : CVE-2011-4144

Mitre link : CVE-2011-4144

CVE.ORG link : CVE-2011-4144

JSON object : View

Products Affected

centos

centos

emc

documentum_content_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2011-4144", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.1, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-02-02T04:09:47.787", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0005.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain \"highest super user privileges\" by leveraging system administrator privileges."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en EMC Documentum Content Server 6.0, 6.5 anteriores a SP2 P02, 6.5 SP3 anteriores a SP3 P02 y 6.6 anteriores a P02 permite a usuarios locales obtener \"privilegios de usuarios muy elevados\" utilizando privilegios de administrador system."}], "lastModified": "2024-11-21T01:31:56.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:documentum_content_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDBAEC8D-D945-48CA-84DD-EDBE8029F636"}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "730510E9-1AE8-44BF-A1DE-5ED40F22D0B6"}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC8840D2-5DE8-4EB6-A03F-BFF1C8A9BF1B"}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AC51C95-97DC-44B4-9935-9423CE60289A"}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.5:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ACB8EDE-C6AF-4B85-83ED-74097A206B49"}, {"criteria": "cpe:2.3:a:emc:documentum_content_server:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25CD1EE0-4E72-4C42-857B-AA45F0A17BBB"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47E84833-47CB-469C-BEED-E15449E9D0E4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}