CVE-2011-3151

The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:canonical:selinux:*:*:*:*:*:*:*:*

Information

Published : 2019-04-22 09:29

Updated : 2019-10-09 16:03


NVD link : CVE-2011-3151

Mitre link : CVE-2011-3151


JSON object : View

CWE
CWE-693

Protection Mechanism Failure

Advertisement

dedicated server usa

Products Affected

canonical

  • selinux