PT-2011-2367 · Opensuse · Opensuse Open Build Service

Marcus Hã¼We

·

CVE-2011-0466

·

Published

2011-04-10

·

Updated

2011-04-21

CVSS v2.0

6.4

Medium

VectorAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions openSUSE Build Service (OBS) versions 2.0.x through 2.0.7 openSUSE Build Service (OBS) versions 2.1.x through 2.1.5
Description The issue allows attackers to bypass intended write-access restrictions and modify a package or project via unspecified vectors.
Recommendations For openSUSE Build Service (OBS) versions 2.0.x through 2.0.7, update to version 2.0.8 or later. For openSUSE Build Service (OBS) versions 2.1.x through 2.1.5, update to version 2.1.6 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0466

Affected Products

Opensuse Open Build Service