CVE-2008-4636

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/32464	Patch
http://secunia.com/advisories/32832	Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html	Patch
http://osvdb.org/50284
https://exchange.xforce.ibmcloud.com/vulnerabilities/46879

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:novell:suse_linux:10.0:::::::*
	cpe:2.3:o:novell:suse_linux:10.1:::::::*
	cpe:2.3:o:novell:suse_linux:10::desktop:::::
	cpe:2.3:o:novell:suse_linux:10::server:::::
	cpe:2.3:o:opensuse:opensuse:10.2:::::::*
	cpe:2.3:o:opensuse:opensuse:11.0:::::::*
	cpe:2.3:o:novell:suse_linux_enterprise_server::::::::
	cpe:2.3:o:novell:suse_linux_enterprise_server:9:::::::*
	cpe:2.3:o:opensuse:opensuse:10.3:::::::*
	cpe:2.3:o:novell:opensuse::::::::
	cpe:2.3:o:novell:suse_linux::::::::
	cpe:2.3:o:opensuse:opensuse::::::::
	cpe:2.3:o:novell:suse_linux:9.3::pro:::::
	cpe:2.3:o:novell:suse_linux:9::server:::::

OR	cpe:2.3:o:suse:yast2-backup:2.14.2:::::::*
	cpe:2.3:o:suse:yast2-backup::::::::

Information

Published : 2008-11-27 00:30

Updated : 2018-10-30 16:27

NVD link : CVE-2008-4636

Mitre link : CVE-2008-4636

JSON object : View

Products Affected

novell

suse_linux
suse_linux_enterprise_server
opensuse

opensuse

opensuse

suse

yast2-backup

CWE

CWE-20

Improper Input Validation

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/32464", "name": "32464", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/32832", "name": "32832", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html", "name": "SUSE-SA:2008:054", "tags": ["Patch"], "refsource": "SUSE"}, {"url": "http://osvdb.org/50284", "name": "50284", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46879", "name": "yast2backup-backup-command-execution(46879)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-4636", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-11-27T00:30Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux:10.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux:10:*:desktop:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux:10:*:server:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_server:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux_enterprise_server:9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:opensuse:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux:9.3:*:pro:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:novell:suse_linux:9:*:server:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:suse:yast2-backup:2.14.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:suse:yast2-backup:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.16.6"}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-30T16:27Z"}