Summary
Detail | |||
---|---|---|---|
Vendor | Redhat | First view | 2011-02-24 |
Product | Policycoreutils | Last view | 2011-02-24 |
Version | Type | ||
Update | |||
Edition | |||
Language | |||
Sofware Edition | |||
Target Software | |||
Target Hardware | |||
Other |
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
Related : CVE
Date | Alert | Description | |
---|---|---|---|
6.9 | 2011-02-24 | CVE-2011-1011 | The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application. |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
100% (1) | CWE-264 | Permissions, Privileges, and Access Controls |
Oval Markup Language : Definitions
OvalID | Name |
---|---|
oval:org.mitre.oval:def:21423 | RHSA-2011:0414: policycoreutils security update (Important) |
oval:org.mitre.oval:def:23059 | ELSA-2011:0414: policycoreutils security update (Important) |
oval:org.mitre.oval:def:27195 | DEPRECATED: ELSA-2011-0414 -- policycoreutils security update (important) |
Open Source Vulnerability Database (OSVDB)
id | Description |
---|---|
72541 | Red Hat policycoreutils seunshare sandbox/seunshare.c seunshare_mount Functio... |
OpenVAS Exploits
id | Description |
---|---|
2012-06-06 | Name : RedHat Update for policycoreutils RHSA-2011:0414-01 File : nvt/gb_RHSA-2011_0414-01_policycoreutils.nasl |
2011-03-24 | Name : Fedora Update for policycoreutils FEDORA-2011-3043 File : nvt/gb_fedora_2011_3043_policycoreutils_fc14.nasl |
Nessus® Vulnerability Scanner
id | Description |
---|---|
2013-07-12 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2011-0414.nasl - Type: ACT_GATHER_INFO |
2012-08-01 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20110404_policycoreutils_on_SL6_x.nasl - Type: ACT_GATHER_INFO |
2011-04-05 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2011-0414.nasl - Type: ACT_GATHER_INFO |
2011-03-21 | Name: The remote Fedora host is missing a security update. File: fedora_2011-3043.nasl - Type: ACT_GATHER_INFO |