CVE-2016-1611 in Filr
Summary
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
01/12/2016
Disclosure
07/31/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 90395 | Novell Filr vainit.sh access control | 264 | Proof-of-Concept | Official fix | CVE-2016-1611 |