Vulnerability Details CVE-2011-1946
gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid function, which allows local users to gain privileges by leveraging access to two unprivileged user accounts, and running many processes under one of these accounts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.1%
CVSS Severity
CVSS v2 Score 7.2
References
- http://openwall.com/lists/oss-security/2011/05/30/2
- http://openwall.com/lists/oss-security/2011/05/31/11
- http://www.securityfocus.com/bid/48035
- https://bugzilla.novell.com/show_bug.cgi?id=695627
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67720
- http://openwall.com/lists/oss-security/2011/05/30/2
- http://openwall.com/lists/oss-security/2011/05/31/11
- http://www.securityfocus.com/bid/48035
- https://bugzilla.novell.com/show_bug.cgi?id=695627
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67720
Products affected by CVE-2011-1946
-
cpe:2.3:a:hongli_lai:libgnomesu:1.0.0