Opensuse Factory
Approved changes feed: RSS · Atom
cpe:2.3:o:novell:opensuse_factory:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Novell (4a1c187d-e568-531f-92b0-685a3df2807c) |
|---|---|
| Product | Opensuse Factory (eda775e6-ffe2-5b8e-9297-7413e338e5b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1551 |
vulnerable | 2026-06-08 04:58:00.363685 |
Details available
SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.
Published: 2011-03-30T22:00:00.000Z
Updated: 2024-08-06T22:28:41.932Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1550 |
not_vulnerable | 2026-06-08 04:58:00.363267 |
Details available
The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by directories for the (1) cobbler, (2) inn, (3) safte-monitor, and (4) uucp packages.
Published: 2011-03-30T22:00:00.000Z
Updated: 2024-09-16T20:37:56.047Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.