Description
The aaa_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.
References
- 46983 vdb-entry
- 43825 third-party-advisory
- 71253 vdb-entry
- SUSE-SR:2011:005 vendor-advisory
- https://bugzilla.novell.com/678827
- [opensuse-updates] 20110322 openSUSE-SU-2011:0207-1 (moderate): aaa_base security update mailing-list
- http://support.novell.com/security/cve/CVE-2011-0468.html
- aaabase-filename-privilege-escalation(66245) vdb-entry