Unscored severity · published Aug 13, 2012
CVE-2011-0523
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified…
–
CVSS
0.5%
EPSS
No
On KEV
Description
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GY
Gypsy · Iain
0.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0523
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0523
Exploit
http://cgit.freedesktop.org/gypsy/commit/?id=40101707cddb319481133b2a137294b6b669bd16
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106927.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107020.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html
Vendor Advisory
http://secunia.com/advisories/49991
More from Gypsy
–
CVE-2011-0524
Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf…