CVE-2011-0988

Published: Apr 18, 2011Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.

Affected (5)

Products: Novell: Suse Linux · Pureftpd: Pure Ftpd

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux	Version 10 sp3
Novell Suse Linux	Version 10 sp4
Novell Suse Linux	Version 11 sp3
Novell Suse Linux	Version 11 sp4
Pureftpd Pure Ftpd	Version 1.0.22