Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2011-2489

Summary
Assigner-redhat
Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749
Published At-27 Jul, 2011 | 01:29
Updated At-06 Aug, 2024 | 23:00
Rejected At-
Credits

Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:redhat
Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749
Published At:27 Jul, 2011 | 01:29
Updated At:06 Aug, 2024 | 23:00
Rejected At:
▼CVE Numbering Authority (CNA)

Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://www.openwall.com/lists/oss-security/2011/06/23/5
mailing-list
x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2011/06/22/6
mailing-list
x_refsource_MLIST
https://hermes.opensuse.org/messages/10082052
vendor-advisory
x_refsource_SUSE
https://bugzilla.novell.com/show_bug.cgi?id=698772
x_refsource_CONFIRM
https://bugzillafiles.novell.org/attachment.cgi?id=435902
x_refsource_CONFIRM
http://www.debian.org/security/2011/dsa-2281
vendor-advisory
x_refsource_DEBIAN
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
x_refsource_CONFIRM
https://hermes.opensuse.org/messages/10082068
vendor-advisory
x_refsource_SUSE
http://www.securityfocus.com/bid/48390
vdb-entry
x_refsource_BID
http://secunia.com/advisories/45448
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/45136
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/23/5
Resource:
mailing-list
x_refsource_MLIST
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/22/6
Resource:
mailing-list
x_refsource_MLIST
Hyperlink: https://hermes.opensuse.org/messages/10082052
Resource:
vendor-advisory
x_refsource_SUSE
Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=698772
Resource:
x_refsource_CONFIRM
Hyperlink: https://bugzillafiles.novell.org/attachment.cgi?id=435902
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.debian.org/security/2011/dsa-2281
Resource:
vendor-advisory
x_refsource_DEBIAN
Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
Resource:
x_refsource_CONFIRM
Hyperlink: https://hermes.opensuse.org/messages/10082068
Resource:
vendor-advisory
x_refsource_SUSE
Hyperlink: http://www.securityfocus.com/bid/48390
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://secunia.com/advisories/45448
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://secunia.com/advisories/45136
Resource:
third-party-advisory
x_refsource_SECUNIA
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://www.openwall.com/lists/oss-security/2011/06/23/5
mailing-list
x_refsource_MLIST
x_transferred
http://www.openwall.com/lists/oss-security/2011/06/22/6
mailing-list
x_refsource_MLIST
x_transferred
https://hermes.opensuse.org/messages/10082052
vendor-advisory
x_refsource_SUSE
x_transferred
https://bugzilla.novell.com/show_bug.cgi?id=698772
x_refsource_CONFIRM
x_transferred
https://bugzillafiles.novell.org/attachment.cgi?id=435902
x_refsource_CONFIRM
x_transferred
http://www.debian.org/security/2011/dsa-2281
vendor-advisory
x_refsource_DEBIAN
x_transferred
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
x_refsource_CONFIRM
x_transferred
https://hermes.opensuse.org/messages/10082068
vendor-advisory
x_refsource_SUSE
x_transferred
http://www.securityfocus.com/bid/48390
vdb-entry
x_refsource_BID
x_transferred
http://secunia.com/advisories/45448
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/45136
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/23/5
Resource:
mailing-list
x_refsource_MLIST
x_transferred
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/22/6
Resource:
mailing-list
x_refsource_MLIST
x_transferred
Hyperlink: https://hermes.opensuse.org/messages/10082052
Resource:
vendor-advisory
x_refsource_SUSE
x_transferred
Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=698772
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://bugzillafiles.novell.org/attachment.cgi?id=435902
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.debian.org/security/2011/dsa-2281
Resource:
vendor-advisory
x_refsource_DEBIAN
x_transferred
Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://hermes.opensuse.org/messages/10082068
Resource:
vendor-advisory
x_refsource_SUSE
x_transferred
Hyperlink: http://www.securityfocus.com/bid/48390
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://secunia.com/advisories/45448
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://secunia.com/advisories/45136
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:secalert@redhat.com
Published At:27 Jul, 2011 | 02:55
Updated At:11 Apr, 2025 | 00:51

Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.2HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 7.2
Base severity: HIGH
Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CPE Matches
nrl
nrl
>>opie>>Versions up to 2.4.1(inclusive)
cpe:2.3:a:nrl:opie:*:test1:*:*:*:*:*:*
nrl
nrl
>>opie>>2.2
cpe:2.3:a:nrl:opie:2.2:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.3
cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.4
cpe:2.3:a:nrl:opie:2.4:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.10
cpe:2.3:a:nrl:opie:2.10:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.11
cpe:2.3:a:nrl:opie:2.11:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.21
cpe:2.3:a:nrl:opie:2.21:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.22
cpe:2.3:a:nrl:opie:2.22:*:*:*:*:*:*:*
nrl
nrl
>>opie>>2.32
cpe:2.3:a:nrl:opie:2.32:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-189Primarynvd@nist.gov
CWE ID: CWE-189
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344secalert@redhat.com
Patch
http://secunia.com/advisories/45136secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/45448secalert@redhat.com
N/A
http://www.debian.org/security/2011/dsa-2281secalert@redhat.com
N/A
http://www.openwall.com/lists/oss-security/2011/06/22/6secalert@redhat.com
Exploit
Patch
http://www.openwall.com/lists/oss-security/2011/06/23/5secalert@redhat.com
Exploit
Patch
http://www.securityfocus.com/bid/48390secalert@redhat.com
N/A
https://bugzilla.novell.com/show_bug.cgi?id=698772secalert@redhat.com
Exploit
Patch
https://bugzillafiles.novell.org/attachment.cgi?id=435902secalert@redhat.com
Patch
https://hermes.opensuse.org/messages/10082052secalert@redhat.com
N/A
https://hermes.opensuse.org/messages/10082068secalert@redhat.com
N/A
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344af854a3a-2127-422b-91ae-364da2661108
Patch
http://secunia.com/advisories/45136af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/45448af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.debian.org/security/2011/dsa-2281af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.openwall.com/lists/oss-security/2011/06/22/6af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
http://www.openwall.com/lists/oss-security/2011/06/23/5af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
http://www.securityfocus.com/bid/48390af854a3a-2127-422b-91ae-364da2661108
N/A
https://bugzilla.novell.com/show_bug.cgi?id=698772af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
https://bugzillafiles.novell.org/attachment.cgi?id=435902af854a3a-2127-422b-91ae-364da2661108
Patch
https://hermes.opensuse.org/messages/10082052af854a3a-2127-422b-91ae-364da2661108
N/A
https://hermes.opensuse.org/messages/10082068af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
Source: secalert@redhat.com
Resource:
Patch
Hyperlink: http://secunia.com/advisories/45136
Source: secalert@redhat.com
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/45448
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://www.debian.org/security/2011/dsa-2281
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/22/6
Source: secalert@redhat.com
Resource:
Exploit
Patch
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/23/5
Source: secalert@redhat.com
Resource:
Exploit
Patch
Hyperlink: http://www.securityfocus.com/bid/48390
Source: secalert@redhat.com
Resource: N/A
Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=698772
Source: secalert@redhat.com
Resource:
Exploit
Patch
Hyperlink: https://bugzillafiles.novell.org/attachment.cgi?id=435902
Source: secalert@redhat.com
Resource:
Patch
Hyperlink: https://hermes.opensuse.org/messages/10082052
Source: secalert@redhat.com
Resource: N/A
Hyperlink: https://hermes.opensuse.org/messages/10082068
Source: secalert@redhat.com
Resource: N/A
Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631344
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: http://secunia.com/advisories/45136
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/45448
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.debian.org/security/2011/dsa-2281
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/22/6
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Patch
Hyperlink: http://www.openwall.com/lists/oss-security/2011/06/23/5
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Patch
Hyperlink: http://www.securityfocus.com/bid/48390
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://bugzilla.novell.com/show_bug.cgi?id=698772
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Patch
Hyperlink: https://bugzillafiles.novell.org/attachment.cgi?id=435902
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://hermes.opensuse.org/messages/10082052
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://hermes.opensuse.org/messages/10082068
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

1Records found
CVE-2011-2490
Matching Score-8
Assigner-Red Hat, Inc.
ShareView Details
Matching Score-8
Assigner-Red Hat, Inc.
CVSS Score-7.2||HIGH
EPSS-0.09% / 26.94%
||
7 Day CHG~0.00%
Published-27 Jul, 2011 | 01:29
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.

Action-Not Available
Vendor-nrln/a
Product-opien/a
CWE ID-CWE-20
Improper Input Validation
Details not found