CVE-2011-0993

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/95697

suse lifecycle management server のその他の脆弱性

• CVE-2013-3709高 7.2WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails …
• CVE-2013-7042中 4.6SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain p…
• CVE-2013-3710中 4.3SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attacke…
• CVE-2010-1325中 4.3Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Ent…