CVE-2011-2490

Publication date 27 July 2011

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.

Read the notes from the security team

Status

Package Ubuntu Release Status
opie 11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life

Notes

jdstrand

per mdeslaur, code not compiled