Detections
Analytics
SuSE 11.1 Security Update : aaa_base (SAT Patch Number 3910)
medium Nessus Plugin ID 53890
Language:
Synopsis
The remote SuSE 11 host is missing a security update.Description
The following bug has been fixed :- The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. (CVE-2011-0461)
Solution
Apply SAT patch number 3910.See Also
https://bugzilla.novell.com/show_bug.cgi?id=650719
https://bugzilla.novell.com/show_bug.cgi?id=653034
https://bugzilla.novell.com/show_bug.cgi?id=661596
Plugin Details
Severity: Medium
ID: 53890
File Name: suse_11_aaa_base-110202.nasl
Version: 1.7
Type: Local
Agent: unix
Family: SuSE Local Security Checks
Published: 5/13/2011
Updated: 1/19/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
CVSS v2
Risk Factor: Medium
Base Score: 6.3
Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:C/A:C
Vulnerability Information
CPE: cpe:/o:novell:suse_linux:11, p-cpe:/a:novell:suse_linux:11:aaa_base
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 2/2/2011
Reference Information
CVE: CVE-2011-0461