medium4.4
CVE-2011-0988
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a…
Impact
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pureftpd | Pure-Ftpd | Version 1.0.22 |
| Novell | Suse Linux | Versions 10, 11 |