CVE-2011-0523

Published: Aug 13, 2012Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.

Affected (1)

Products: Iain: Gypsy

Iain

1 product

Gypsy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Iain Gypsy	Version 0.8

Related CWEs

CWE-264

References (20)

http://cgit.freedesktop.org/gypsy/commit/?id=40101707cddb319481133b2a137294b6b669bd16

Source: secalert@redhat.com

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106927.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107020.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html

Source: secalert@redhat.com

http://secunia.com/advisories/49991

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2011/01/24/10

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/01/25/10

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=33431

Source: secalert@redhat.com

https://bugs.launchpad.net/ubuntu/+source/gypsy/+bug/690323

Source: secalert@redhat.com

http://cgit.freedesktop.org/gypsy/commit/?id=40101707cddb319481133b2a137294b6b669bd16