CVE-2016-1611: High severity novell filr vulnerability
Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1611?
CVE-2016-1611 is considered a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2016-1611?
To fix CVE-2016-1611, apply Hot Patch 6 for Novell Filr 1.2 or Hot Patch 2 for Novell Filr 2.0.
What can local users do to exploit CVE-2016-1611?
Local users can exploit CVE-2016-1611 by replacing the content of /etc/profile.d/vainit.sh with arbitrary shell commands, leading to privilege escalation.
Which versions of Novell Filr are affected by CVE-2016-1611?
CVE-2016-1611 affects Novell Filr versions 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2.
What type of vulnerability is CVE-2016-1611 classified as?
CVE-2016-1611 is classified as a local privilege escalation vulnerability.