CVE-2011-1551

Name of the Vulnerable Software and Affected Versions openSUSE Factory (affected versions not specified)

Description The issue allows local users to potentially gain privileges by exploiting access to the web-service user account during root filesystem operations by the Cobbler daemon. This is due to the ownership of the /var/log/cobbler/ directory tree being assigned to the web-service user account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.