Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.

This update fixes off-by-one errors in opiesu (CVE-2011-2489) and missing setuid() return value checks in opielogin (CVE-2011-2490).

This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local :

/usr/bin/opiesu root:root 4755

This update fixes off-by-one errors in opiesu (CVE-2011-2489) and missing setuid() return value checks in opielogin. (CVE-2011-2490)

This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local :

/usr/bin/opiesu root:root 4755

Sebastian Krahmer discovered that opie, a system that makes it simple to use One-Time passwords in applications, is prone to a privilege escalation (CVE-2011-2490 ) and an off-by-one error, which can lead to the execution of arbitrary code (CVE-2011-2489 ). Adam Zabrocki and Maksymilian Arciemowicz also discovered another off-by-one error (CVE-2010-1938 ), which only affects the lenny version as the fix was already included in squeeze.

ID	Name	Product	Family	Severity
75988	openSUSE Security Update : opie (openSUSE-SU-2011:0848-1)	Nessus	SuSE Local Security Checks	high
75700	openSUSE Security Update : opie (openSUSE-SU-2011:0848-1)	Nessus	SuSE Local Security Checks	high
57238	SuSE 10 Security Update : opie (ZYPP Patch Number 7594)	Nessus	SuSE Local Security Checks	high
55716	SuSE 10 Security Update : opie (ZYPP Patch Number 7595)	Nessus	SuSE Local Security Checks	high
55714	SuSE 11.1 Security Update : opie (SAT Patch Number 4815)	Nessus	SuSE Local Security Checks	high
55713	SuSE 11.1 Security Update : opie (SAT Patch Number 4815)	Nessus	SuSE Local Security Checks	high
55641	Debian DSA-2281-1 : opie - several vulnerabilities	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2011-2489

high

Tenable Plugins

high

high

high

high

high

high

high