Description
pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.
References
- 44039 third-party-advisory
- SUSE-SU-2011:0306 vendor-advisory
- sles-pureftpd-privilege-escalation(66618) vdb-entry