CVE-2008-4636

Impact

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html
• http://osvdb.org/50284
• http://secunia.com/advisories/32832
• http://www.securityfocus.com/bid/32464
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46879
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html
• http://osvdb.org/50284
• http://secunia.com/advisories/32832
• http://www.securityfocus.com/bid/32464
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46879