CVE-2011-0988

No fix known EPSS <1%

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.

Published 2011-04-18 · CVE record · OSV

Products: pureftpd pure-ftpd, novell suse_linux