PT-2016-4889
CVE-2016-1611
·
تاريخ النشر
2016-08-01
·
تاريخ التحديث
2017-09-03
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Novell Filr versions 1.2 before Hot Patch 6
Novell Filr versions 2.0 before Hot Patch 2
Description
The issue allows local users to gain privileges by replacing the content of a specific file with arbitrary shell commands, due to world-writable permissions for /etc/profile.d/vainit.sh.
Recommendations
For Novell Filr version 1.2, apply Hot Patch 6 to resolve the issue.
For Novell Filr version 2.0, apply Hot Patch 2 to resolve the issue.
As a temporary workaround, consider restricting write access to the /etc/profile.d/vainit.sh file until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾