CVE-2011-2490 | BDVDB-2026-46808 Detail
Description#
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.openwall.com/lists/oss-security/2011/06/23/5
- http://www.openwall.com/lists/oss-security/2011/06/22/6
- https://hermes.opensuse.org/messages/10082052
- https://bugzilla.novell.com/show_bug.cgi?id=698772
- http://www.debian.org/security/2011/dsa-2281
- http://secunia.com/advisories/39966
- https://hermes.opensuse.org/messages/10082068
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345
- http://www.securityfocus.com/bid/48390
- https://bugzillafiles.novell.org/attachment.cgi?id=435901
- http://secunia.com/advisories/45448
- http://secunia.com/advisories/45136
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.