Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Novell openSUSE 'aaa_base'标签扩展文件名处理权限提升漏洞
Vulnerability Description
Novell openSUSE是美国Novell公司的一套基于Linux的自由操作系统。 openSUSE的aaa_base包中存在权限许可和访问控制漏洞。该漏洞是由于当执行标签扩展时,包含shell元字符文件名称的处理过程中存在的错误导致的。本地用户可以借助特制命名文件欺骗另一个用户,导致执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A