Vulnerability in Novell Client for Linux Allows Privilege Escalation
CVE-2014-0595

Currently unrated

Key Information:

Vendor
Novell
Status
Open Enterprise Server
Vendor
CVE Published:
8 May 2014

Summary

The Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 contains a vulnerability due to improper management of an array in the /opt/novell/ncl/bin/nwrights component. This flaw enables local users to elevate their permissions to S by exploiting the F permission granted by an administrator under certain conditions. This vulnerability poses risks to system integrity and requires immediate attention.

References

http://www.securityfocus.com/bid/67144
vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2014...
vendor-advisoryx_refsource_SUSE
http://www.novell.com/support/kb/doc.php?id=7014932
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.