CVE-2011-3177: Infoleak
The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3177?
The severity of CVE-2011-3177 is considered to be moderate due to the exposure of sensitive information.
How do I fix CVE-2011-3177?
To fix CVE-2011-3177, ensure that YaST2 is updated to a version that restricts file permissions to prevent world readability.
What types of files are affected by CVE-2011-3177?
CVE-2011-3177 affects network configuration files created by YaST2, which may contain sensitive information such as passwords.
Who is affected by CVE-2011-3177?
Local users on systems with vulnerable versions of YaST2 are affected by CVE-2011-3177, as they can access sensitive configuration files.
Is there any known exploit for CVE-2011-3177?
While there are no widely reported exploits specifically targeting CVE-2011-3177, the vulnerability allows access to sensitive information that could be exploited.