Vulnerability-Lookup

CVE-2011-2490 (GCVE-0-2011-2490)

Vulnerability from cvelistv5 – Published: 2011-07-27 01:29 – Updated: 2024-08-06 23:00

Summary

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

12 references

URL	Tags
http://www.openwall.com/lists/oss-security/2011/06/23/5	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2011/06/22/6	mailing-listx_refsource_MLIST
https://hermes.opensuse.org/messages/10082052	vendor-advisoryx_refsource_SUSE
https://bugzilla.novell.com/show_bug.cgi?id=698772	x_refsource_CONFIRM
http://www.debian.org/security/2011/dsa-2281	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/39966	third-party-advisoryx_refsource_SECUNIA
https://hermes.opensuse.org/messages/10082068	vendor-advisoryx_refsource_SUSE
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345	x_refsource_CONFIRM
http://www.securityfocus.com/bid/48390	vdb-entryx_refsource_BID
https://bugzillafiles.novell.org/attachment.cgi?i…	x_refsource_CONFIRM
http://secunia.com/advisories/45448	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/45136	third-party-advisoryx_refsource_SECUNIA

Date Public

2011-06-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:00:34.168Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
          },
          {
            "name": "[oss-security] 20110622 CVE requests: opie off by one and setuid() failure",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
          },
          {
            "name": "openSUSE-SU-2011:0848",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://hermes.opensuse.org/messages/10082052"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
          },
          {
            "name": "DSA-2281",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2281"
          },
          {
            "name": "39966",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/39966"
          },
          {
            "name": "SUSE-SU-2011:0849",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "https://hermes.opensuse.org/messages/10082068"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
          },
          {
            "name": "48390",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48390"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
          },
          {
            "name": "45448",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45448"
          },
          {
            "name": "45136",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45136"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-06-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-09-07T09:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
        },
        {
          "name": "[oss-security] 20110622 CVE requests: opie off by one and setuid() failure",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
        },
        {
          "name": "openSUSE-SU-2011:0848",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://hermes.opensuse.org/messages/10082052"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
        },
        {
          "name": "DSA-2281",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2281"
        },
        {
          "name": "39966",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/39966"
        },
        {
          "name": "SUSE-SU-2011:0849",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "https://hermes.opensuse.org/messages/10082068"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
        },
        {
          "name": "48390",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48390"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
        },
        {
          "name": "45448",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45448"
        },
        {
          "name": "45136",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45136"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2490",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
            },
            {
              "name": "[oss-security] 20110622 CVE requests: opie off by one and setuid() failure",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
            },
            {
              "name": "openSUSE-SU-2011:0848",
              "refsource": "SUSE",
              "url": "https://hermes.opensuse.org/messages/10082052"
            },
            {
              "name": "https://bugzilla.novell.com/show_bug.cgi?id=698772",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
            },
            {
              "name": "DSA-2281",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2281"
            },
            {
              "name": "39966",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/39966"
            },
            {
              "name": "SUSE-SU-2011:0849",
              "refsource": "SUSE",
              "url": "https://hermes.opensuse.org/messages/10082068"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
            },
            {
              "name": "48390",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48390"
            },
            {
              "name": "https://bugzillafiles.novell.org/attachment.cgi?id=435901",
              "refsource": "CONFIRM",
              "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
            },
            {
              "name": "45448",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45448"
            },
            {
              "name": "45136",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45136"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-2490",
    "datePublished": "2011-07-27T01:29:00.000Z",
    "dateReserved": "2011-06-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T23:00:34.168Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-2490",
      "date": "2026-08-14",
      "epss": "0.00534",
      "percentile": "0.42407"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*\", \"versionEndIncluding\": \"2.4.1\", \"matchCriteriaId\": \"AEEC73FC-2BB6-4B8F-9596-BBB287AFFDA2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D33B387-8EE6-4F36-A4B5-509FF8DA8C1E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9B3734D-F6CB-4242-92FA-EDF425CCBCEF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2B076A0-0216-4A52-ABA6-2E511FB6DB5E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32B7BBAB-609B-4D4D-BF5A-C4E95F0A8C51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5889C86D-4285-4B22-B3F0-76984D8CEC4B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E0779EF0-9638-474E-9EF2-971ADA10F1D9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5AEB7E9A-3F68-4F20-A073-751A76452C67\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9A53F58-7514-4B07-AC56-C6F928F9D3F3\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.\"}, {\"lang\": \"es\", \"value\": \"opielogin.c de opielogin de OPIE 2.4.1-test1 y versiones anteriores no comprueba el valor de retorno de la llamada al sistema setuid, lo que permite a usuarios locales escalar privilegios disponiendo de una cuenta que ya est\\u00e9 ejecutando su n\\u00famero m\\u00e1ximo de procesos.\"}]",
      "id": "CVE-2011-2490",
      "lastModified": "2024-11-21T01:28:23.530",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 7.2, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 3.9, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2011-07-27T02:55:02.087",
      "references": "[{\"url\": \"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://secunia.com/advisories/39966\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/45136\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/45448\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.debian.org/security/2011/dsa-2281\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/06/22/6\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/06/23/5\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.securityfocus.com/bid/48390\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bugzilla.novell.com/show_bug.cgi?id=698772\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"https://bugzillafiles.novell.org/attachment.cgi?id=435901\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"https://hermes.opensuse.org/messages/10082052\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://hermes.opensuse.org/messages/10082068\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://secunia.com/advisories/39966\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/45136\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/45448\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2011/dsa-2281\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/06/22/6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2011/06/23/5\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"http://www.securityfocus.com/bid/48390\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.novell.com/show_bug.cgi?id=698772\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Patch\"]}, {\"url\": \"https://bugzillafiles.novell.org/attachment.cgi?id=435901\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://hermes.opensuse.org/messages/10082052\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://hermes.opensuse.org/messages/10082068\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2011-2490\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2011-07-27T02:55:02.087\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.\"},{\"lang\":\"es\",\"value\":\"opielogin.c de opielogin de OPIE 2.4.1-test1 y versiones anteriores no comprueba el valor de retorno de la llamada al sistema setuid, lo que permite a usuarios locales escalar privilegios disponiendo de una cuenta que ya est\u00e9 ejecutando su n\u00famero m\u00e1ximo de procesos.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":7.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.4.1\",\"matchCriteriaId\":\"AEEC73FC-2BB6-4B8F-9596-BBB287AFFDA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D33B387-8EE6-4F36-A4B5-509FF8DA8C1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9B3734D-F6CB-4242-92FA-EDF425CCBCEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2B076A0-0216-4A52-ABA6-2E511FB6DB5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32B7BBAB-609B-4D4D-BF5A-C4E95F0A8C51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5889C86D-4285-4B22-B3F0-76984D8CEC4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0779EF0-9638-474E-9EF2-971ADA10F1D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AEB7E9A-3F68-4F20-A073-751A76452C67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A53F58-7514-4B07-AC56-C6F928F9D3F3\"}]}]}],\"references\":[{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://secunia.com/advisories/39966\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/45136\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/45448\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2281\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/06/22/6\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/06/23/5\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.securityfocus.com/bid/48390\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.novell.com/show_bug.cgi?id=698772\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"https://bugzillafiles.novell.org/attachment.cgi?id=435901\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://hermes.opensuse.org/messages/10082052\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://hermes.opensuse.org/messages/10082068\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://secunia.com/advisories/39966\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/45136\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/45448\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2011/dsa-2281\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/06/22/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2011/06/23/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"http://www.securityfocus.com/bid/48390\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.novell.com/show_bug.cgi?id=698772\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Patch\"]},{\"url\":\"https://bugzillafiles.novell.org/attachment.cgi?id=435901\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://hermes.opensuse.org/messages/10082052\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://hermes.opensuse.org/messages/10082068\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-09T23:40:27Z",
      "cve": "CVE-2011-2490",
      "id": "CVE-2011-2490",
      "initial_release_date": "2023-02-15T05:52:33Z",
      "product_status:known_affected": "394",
      "product_status:recommended": "102",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2011-2490",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2011-2490.json",
      "version": "30"
    }
  }
}

FKIE_CVE-2011-2490

Vulnerability from fkie_nvd - Published: 2011-07-27 02:55 - Updated: 2026-06-16 23:31

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345	Patch
secalert@redhat.com	http://secunia.com/advisories/39966	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/45136	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/45448
secalert@redhat.com	http://www.debian.org/security/2011/dsa-2281
secalert@redhat.com	http://www.openwall.com/lists/oss-security/2011/06/22/6	Exploit, Patch
secalert@redhat.com	http://www.openwall.com/lists/oss-security/2011/06/23/5	Exploit, Patch
secalert@redhat.com	http://www.securityfocus.com/bid/48390
secalert@redhat.com	https://bugzilla.novell.com/show_bug.cgi?id=698772	Exploit, Patch
secalert@redhat.com	https://bugzillafiles.novell.org/attachment.cgi?id=435901	Patch
secalert@redhat.com	https://hermes.opensuse.org/messages/10082052
secalert@redhat.com	https://hermes.opensuse.org/messages/10082068
af854a3a-2127-422b-91ae-364da2661108	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345	Patch
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/39966	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/45136	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/45448
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2011/dsa-2281
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2011/06/22/6	Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2011/06/23/5	Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/48390
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.novell.com/show_bug.cgi?id=698772	Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108	https://bugzillafiles.novell.org/attachment.cgi?id=435901	Patch
af854a3a-2127-422b-91ae-364da2661108	https://hermes.opensuse.org/messages/10082052
af854a3a-2127-422b-91ae-364da2661108	https://hermes.opensuse.org/messages/10082068

Impacted products

Vendor	Product	Version
nrl	opie	*
nrl	opie	2.2
nrl	opie	2.3
nrl	opie	2.4
nrl	opie	2.10
nrl	opie	2.11
nrl	opie	2.21
nrl	opie	2.22
nrl	opie	2.32

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*",
              "matchCriteriaId": "AEEC73FC-2BB6-4B8F-9596-BBB287AFFDA2",
              "versionEndIncluding": "2.4.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D33B387-8EE6-4F36-A4B5-509FF8DA8C1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9B3734D-F6CB-4242-92FA-EDF425CCBCEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2B076A0-0216-4A52-ABA6-2E511FB6DB5E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "32B7BBAB-609B-4D4D-BF5A-C4E95F0A8C51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "5889C86D-4285-4B22-B3F0-76984D8CEC4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0779EF0-9638-474E-9EF2-971ADA10F1D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AEB7E9A-3F68-4F20-A073-751A76452C67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9A53F58-7514-4B07-AC56-C6F928F9D3F3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."
    },
    {
      "lang": "es",
      "value": "opielogin.c de opielogin de OPIE 2.4.1-test1 y versiones anteriores no comprueba el valor de retorno de la llamada al sistema setuid, lo que permite a usuarios locales escalar privilegios disponiendo de una cuenta que ya est\u00e9 ejecutando su n\u00famero m\u00e1ximo de procesos."
    }
  ],
  "id": "CVE-2011-2490",
  "lastModified": "2026-06-16T23:31:26.543",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-07-27T02:55:02.087",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39966"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/45136"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/45448"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2011/dsa-2281"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/48390"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://hermes.opensuse.org/messages/10082052"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://hermes.opensuse.org/messages/10082068"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39966"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/45136"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/45448"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2011/dsa-2281"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/48390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://hermes.opensuse.org/messages/10082052"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://hermes.opensuse.org/messages/10082068"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-8P43-WPGC-4FH2

Vulnerability from github – Published: 2022-05-17 05:39 – Updated: 2022-05-17 05:39

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2011-2490"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2011-07-27T02:55:00Z",
    "severity": "HIGH"
  },
  "details": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.",
  "id": "GHSA-8p43-wpgc-4fh2",
  "modified": "2022-05-17T05:39:29Z",
  "published": "2022-05-17T05:39:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2490"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
    },
    {
      "type": "WEB",
      "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
    },
    {
      "type": "WEB",
      "url": "https://hermes.opensuse.org/messages/10082052"
    },
    {
      "type": "WEB",
      "url": "https://hermes.opensuse.org/messages/10082068"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/39966"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/45136"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/45448"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2011/dsa-2281"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/48390"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2011-2490

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2011-2490

Aliases

CVE-2011-2490

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2011-2490",
    "description": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.",
    "id": "GSD-2011-2490",
    "references": [
      "https://www.suse.com/security/cve/CVE-2011-2490.html",
      "https://www.debian.org/security/2011/dsa-2281"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-2490"
      ],
      "details": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.",
      "id": "GSD-2011-2490",
      "modified": "2023-12-13T01:19:06.896314Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2011-2490",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "[oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
          },
          {
            "name": "[oss-security] 20110622 CVE requests: opie off by one and setuid() failure",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
          },
          {
            "name": "openSUSE-SU-2011:0848",
            "refsource": "SUSE",
            "url": "https://hermes.opensuse.org/messages/10082052"
          },
          {
            "name": "https://bugzilla.novell.com/show_bug.cgi?id=698772",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
          },
          {
            "name": "DSA-2281",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2011/dsa-2281"
          },
          {
            "name": "39966",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/39966"
          },
          {
            "name": "SUSE-SU-2011:0849",
            "refsource": "SUSE",
            "url": "https://hermes.opensuse.org/messages/10082068"
          },
          {
            "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345",
            "refsource": "CONFIRM",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
          },
          {
            "name": "48390",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/48390"
          },
          {
            "name": "https://bugzillafiles.novell.org/attachment.cgi?id=435901",
            "refsource": "CONFIRM",
            "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
          },
          {
            "name": "45448",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/45448"
          },
          {
            "name": "45136",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/45136"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.4.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2490"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345"
            },
            {
              "name": "39966",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/39966"
            },
            {
              "name": "https://bugzilla.novell.com/show_bug.cgi?id=698772",
              "refsource": "CONFIRM",
              "tags": [
                "Exploit",
                "Patch"
              ],
              "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772"
            },
            {
              "name": "[oss-security] 20110623 Re: CVE requests: opie off by one and setuid() failure",
              "refsource": "MLIST",
              "tags": [
                "Exploit",
                "Patch"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5"
            },
            {
              "name": "45136",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/45136"
            },
            {
              "name": "DSA-2281",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2011/dsa-2281"
            },
            {
              "name": "48390",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/48390"
            },
            {
              "name": "[oss-security] 20110622 CVE requests: opie off by one and setuid() failure",
              "refsource": "MLIST",
              "tags": [
                "Exploit",
                "Patch"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6"
            },
            {
              "name": "https://bugzillafiles.novell.org/attachment.cgi?id=435901",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901"
            },
            {
              "name": "SUSE-SU-2011:0849",
              "refsource": "SUSE",
              "tags": [],
              "url": "https://hermes.opensuse.org/messages/10082068"
            },
            {
              "name": "45448",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/45448"
            },
            {
              "name": "openSUSE-SU-2011:0848",
              "refsource": "SUSE",
              "tags": [],
              "url": "https://hermes.opensuse.org/messages/10082052"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2011-09-07T03:17Z",
      "publishedDate": "2011-07-27T02:55Z"
    }
  }
}

OPENSUSE-SU-2024:10550-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

opie-2.4-726.12 on GA media

Severity

Moderate

Notes

Title of the patch: opie-2.4-726.12 on GA media

Description of the patch: These are all security issues fixed in the opie-2.4-726.12 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-10550

CVE-2011-2489

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2011-2490

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-2.4-726.12.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64	—	Vendor Fix

Threats

Impact important

References

8 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2011-2489/	self
https://www.suse.com/security/cve/CVE-2011-2490/	self
https://www.suse.com/security/cve/CVE-2011-2489	external
https://bugzilla.suse.com/698772	external
https://www.suse.com/security/cve/CVE-2011-2490	external
https://bugzilla.suse.com/698772	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "opie-2.4-726.12 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the opie-2.4-726.12 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10550",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10550-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2011-2489 page",
        "url": "https://www.suse.com/security/cve/CVE-2011-2489/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2011-2490 page",
        "url": "https://www.suse.com/security/cve/CVE-2011-2490/"
      }
    ],
    "title": "opie-2.4-726.12 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10550-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opie-2.4-726.12.aarch64",
                "product": {
                  "name": "opie-2.4-726.12.aarch64",
                  "product_id": "opie-2.4-726.12.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "opie-32bit-2.4-726.12.aarch64",
                "product": {
                  "name": "opie-32bit-2.4-726.12.aarch64",
                  "product_id": "opie-32bit-2.4-726.12.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opie-2.4-726.12.ppc64le",
                "product": {
                  "name": "opie-2.4-726.12.ppc64le",
                  "product_id": "opie-2.4-726.12.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "opie-32bit-2.4-726.12.ppc64le",
                "product": {
                  "name": "opie-32bit-2.4-726.12.ppc64le",
                  "product_id": "opie-32bit-2.4-726.12.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opie-2.4-726.12.s390x",
                "product": {
                  "name": "opie-2.4-726.12.s390x",
                  "product_id": "opie-2.4-726.12.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "opie-32bit-2.4-726.12.s390x",
                "product": {
                  "name": "opie-32bit-2.4-726.12.s390x",
                  "product_id": "opie-32bit-2.4-726.12.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opie-2.4-726.12.x86_64",
                "product": {
                  "name": "opie-2.4-726.12.x86_64",
                  "product_id": "opie-2.4-726.12.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "opie-32bit-2.4-726.12.x86_64",
                "product": {
                  "name": "opie-32bit-2.4-726.12.x86_64",
                  "product_id": "opie-32bit-2.4-726.12.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-2.4-726.12.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-2.4-726.12.aarch64"
        },
        "product_reference": "opie-2.4-726.12.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-2.4-726.12.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-2.4-726.12.ppc64le"
        },
        "product_reference": "opie-2.4-726.12.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-2.4-726.12.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-2.4-726.12.s390x"
        },
        "product_reference": "opie-2.4-726.12.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-2.4-726.12.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-2.4-726.12.x86_64"
        },
        "product_reference": "opie-2.4-726.12.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-32bit-2.4-726.12.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64"
        },
        "product_reference": "opie-32bit-2.4-726.12.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-32bit-2.4-726.12.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le"
        },
        "product_reference": "opie-32bit-2.4-726.12.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-32bit-2.4-726.12.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x"
        },
        "product_reference": "opie-32bit-2.4-726.12.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opie-32bit-2.4-726.12.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64"
        },
        "product_reference": "opie-32bit-2.4-726.12.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2011-2489",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2011-2489"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:opie-2.4-726.12.aarch64",
          "openSUSE Tumbleweed:opie-2.4-726.12.ppc64le",
          "openSUSE Tumbleweed:opie-2.4-726.12.s390x",
          "openSUSE Tumbleweed:opie-2.4-726.12.x86_64",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2011-2489",
          "url": "https://www.suse.com/security/cve/CVE-2011-2489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 698772 for CVE-2011-2489",
          "url": "https://bugzilla.suse.com/698772"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:opie-2.4-726.12.aarch64",
            "openSUSE Tumbleweed:opie-2.4-726.12.ppc64le",
            "openSUSE Tumbleweed:opie-2.4-726.12.s390x",
            "openSUSE Tumbleweed:opie-2.4-726.12.x86_64",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2011-2489"
    },
    {
      "cve": "CVE-2011-2490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2011-2490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:opie-2.4-726.12.aarch64",
          "openSUSE Tumbleweed:opie-2.4-726.12.ppc64le",
          "openSUSE Tumbleweed:opie-2.4-726.12.s390x",
          "openSUSE Tumbleweed:opie-2.4-726.12.x86_64",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x",
          "openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2011-2490",
          "url": "https://www.suse.com/security/cve/CVE-2011-2490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 698772 for CVE-2011-2490",
          "url": "https://bugzilla.suse.com/698772"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:opie-2.4-726.12.aarch64",
            "openSUSE Tumbleweed:opie-2.4-726.12.ppc64le",
            "openSUSE Tumbleweed:opie-2.4-726.12.s390x",
            "openSUSE Tumbleweed:opie-2.4-726.12.x86_64",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.aarch64",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.ppc64le",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.s390x",
            "openSUSE Tumbleweed:opie-32bit-2.4-726.12.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2011-2490"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2011-2490 (GCVE-0-2011-2490)

FKIE_CVE-2011-2490

GHSA-8P43-WPGC-4FH2

GSD-2011-2490

OPENSUSE-SU-2024:10550-1

Tags

Sightings

Nomenclature