« Volver al listado

CVE-2011-0988

Estado: ModificadaMedia (4.4)—

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Novell — Suse LinuxPureftpd — Pure-ftpd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-0988",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-04-18T17:55:01.030",
  "references": [
    {
      "url": "http://secunia.com/advisories/44039",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66618",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://hermes.opensuse.org/messages/7849430",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/44039",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66618",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://hermes.opensuse.org/messages/7849430",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "pure-ftpd 1.0.22, tal como se utiliza en SUSE Linux Enterprise Server 10 Service Pack 3 y Service Pack 4, y Enterprise Desktop 10 Service Pack 3 y Service Pack 4, cuando se ejecutan las extensiones OES Netware, crea un directorio en el que todo el mundo puede escribir, lo cual permite a usuarios locales sobrescribir archivos de forma arbitraria y ganar  privilegios a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:28:23.110",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pureftpd:pure-ftpd:1.0.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66DC1055-CD1D-48B3-9CC4-40F42C3490A1"
            },
            {
              "criteria": "cpe:2.3:o:novell:suse_linux:10:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BCA5CC9-72F0-46ED-A0DF-611377E2D3BD"
            },
            {
              "criteria": "cpe:2.3:o:novell:suse_linux:10:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D9148F6-3E3A-42D0-B398-B069A683A6B2"
            },
            {
              "criteria": "cpe:2.3:o:novell:suse_linux:11:sp3:desktop:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C041069-C3AF-468E-9E20-55974B4B9C25"
            },
            {
              "criteria": "cpe:2.3:o:novell:suse_linux:11:sp4:desktop:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D038A9C-3B15-4E33-BD76-500927801064"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}