« Volver al listado

CVE-2011-2490

Estado: ModificadaAlta (7.2)—

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

NRL — Opie

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2490",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-07-27T02:55:02.087",
  "references": [
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/39966",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/45136",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/45448",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2011/dsa-2281",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/48390",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://hermes.opensuse.org/messages/10082052",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://hermes.opensuse.org/messages/10082068",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/39966",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/45136",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/45448",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2011/dsa-2281",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/06/22/6",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/06/23/5",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/48390",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.novell.com/show_bug.cgi?id=698772",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzillafiles.novell.org/attachment.cgi?id=435901",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://hermes.opensuse.org/messages/10082052",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://hermes.opensuse.org/messages/10082068",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes."
    },
    {
      "lang": "es",
      "value": "opielogin.c de opielogin de OPIE 2.4.1-test1 y versiones anteriores no comprueba el valor de retorno de la llamada al sistema setuid, lo que permite a usuarios locales escalar privilegios disponiendo de una cuenta que ya esté ejecutando su número máximo de procesos."
    }
  ],
  "lastModified": "2026-06-16T23:31:26.543",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEEC73FC-2BB6-4B8F-9596-BBB287AFFDA2",
              "versionEndIncluding": "2.4.1"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D33B387-8EE6-4F36-A4B5-509FF8DA8C1E"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9B3734D-F6CB-4242-92FA-EDF425CCBCEF"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2B076A0-0216-4A52-ABA6-2E511FB6DB5E"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32B7BBAB-609B-4D4D-BF5A-C4E95F0A8C51"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5889C86D-4285-4B22-B3F0-76984D8CEC4B"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0779EF0-9638-474E-9EF2-971ADA10F1D9"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AEB7E9A-3F68-4F20-A073-751A76452C67"
            },
            {
              "criteria": "cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9A53F58-7514-4B07-AC56-C6F928F9D3F3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}