CVE-2011-0460: Medium severity Kbd-project Kbd vulnerability
Published Apr 16, 2014
·Updated
The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.
Affected Software
15 affected components
Kbd-project Kbd=1.04
Kbd-project Kbd=1.12
Kbd-project Kbd=1.01
Kbd-project Kbd=0.99
Kbd-project Kbd<=1.14.1
Kbd-project Kbd=1.08
Kbd-project Kbd=1.05
Kbd-project Kbd=1.14
Kbd-project Kbd=1.13
Kbd-project Kbd=1.03
Kbd-project Kbd=1.06
Kbd-project Kbd=1.10
Kbd-project Kbd=1.11
openSUSE openSUSE=11.2
openSUSE openSUSE=11.3
Event History
Apr 16, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:37 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-0460?
CVE-2011-0460 has a medium severity rating but can lead to significant file overwriting risks if exploited.
2
How do I fix CVE-2011-0460?
To fix CVE-2011-0460, update kbd to version 1.14.2 or later, or address the symlink vulnerability in the init script.
3
Which versions of kbd are affected by CVE-2011-0460?
CVE-2011-0460 affects kbd versions up to and including 1.14.1.
4
Can CVE-2011-0460 be exploited remotely?
CVE-2011-0460 is a local vulnerability, thus it requires local access to exploit.
5
What is the main attack vector for CVE-2011-0460?
The main attack vector for CVE-2011-0460 is a symlink attack targeting the /dev/shm/defkeymap.map file.