CVE-2011-0461 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2011-0461 Interim 1 38 2025-11-05T05:51:44Z current 2021-05-30T12:55:55Z 2025-11-05T05:51:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2011-0461 /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2EGMBZ4V3FXEOTK3OYPVBV3OWLOESLOL/#2EGMBZ4V3FXEOTK3OYPVBV3OWLOESLOL E-Mail link for SUSE-SR:2011:005 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LELHDVK3NB65FNSKEM3ZI6U2R5NOGDN3/#LELHDVK3NB65FNSKEM3ZI6U2R5NOGDN3 E-Mail link for SUSE-SR:2011:009 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 openSUSE Leap 15.0 openSUSE Tumbleweed aaa_base-11-6.105.1 aaa_base-11-6.38.1 aaa_base-11-6.65.1 aaa_base-11-6.90.1 aaa_base-13.2+git20140911.61c1681-1.16 aaa_base-13.2+git20140911.61c1681-1.8 aaa_base-13.2+git20140911.61c1681-28.1 aaa_base-13.2+git20140911.61c1681-36.1 aaa_base-13.2+git20140911.61c1681-38.13.1 aaa_base-13.2+git20140911.61c1681-38.8.1 aaa_base-13.2+git20140911.61c1681-9.1 aaa_base-13.2+git20160915.106a00d-1.1 aaa_base-84.87+git20180409.04c9dae-1.8 aaa_base-84.87+git20180409.04c9dae-3.6.1 aaa_base-84.87+git20180409.04c9dae-lp150.1.1 aaa_base-84.87+git20230815.cab7b44-1.8 aaa_base-84.87+git20240906.742565b-slfo.1.1_1.2 aaa_base-84.87+git20250429.1cad3bc-160000.2.2 aaa_base-extras-13.2+git20140911.61c1681-1.16 aaa_base-extras-13.2+git20140911.61c1681-1.8 aaa_base-extras-13.2+git20140911.61c1681-28.1 aaa_base-extras-13.2+git20140911.61c1681-36.1 aaa_base-extras-13.2+git20140911.61c1681-38.13.1 aaa_base-extras-13.2+git20140911.61c1681-38.8.1 aaa_base-extras-13.2+git20140911.61c1681-9.1 aaa_base-extras-13.2+git20160915.106a00d-1.1 aaa_base-extras-84.87+git20180409.04c9dae-1.8 aaa_base-extras-84.87+git20180409.04c9dae-3.6.1 aaa_base-extras-84.87+git20180409.04c9dae-lp150.1.1 aaa_base-extras-84.87+git20250429.1cad3bc-160000.2.2 aaa_base-malloccheck-13.2+git20140911.61c1681-1.16 aaa_base-malloccheck-13.2+git20140911.61c1681-28.1 aaa_base-malloccheck-13.2+git20140911.61c1681-36.1 aaa_base-malloccheck-13.2+git20140911.61c1681-38.13.1 aaa_base-malloccheck-13.2+git20140911.61c1681-38.8.1 aaa_base-malloccheck-13.2+git20140911.61c1681-9.1 aaa_base-malloccheck-13.2+git20160915.106a00d-1.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-1.8 aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 aaa_base-malloccheck-84.87+git20250429.1cad3bc-160000.2.2 aaa_base-wsl-84.87+git20250429.1cad3bc-160000.2.2 aaa_base-yama-enable-ptrace-84.87+git20250429.1cad3bc-160000.2.2 aaa_base-13.2+git20140911.61c1681-1.16 as a component of SUSE Linux Enterprise Desktop 12 aaa_base-extras-13.2+git20140911.61c1681-1.16 as a component of SUSE Linux Enterprise Desktop 12 aaa_base-13.2+git20140911.61c1681-9.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 aaa_base-extras-13.2+git20140911.61c1681-9.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 aaa_base-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 aaa_base-extras-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 aaa_base-13.2+git20140911.61c1681-36.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 aaa_base-extras-13.2+git20140911.61c1681-36.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 aaa_base-13.2+git20140911.61c1681-38.8.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 aaa_base-extras-13.2+git20140911.61c1681-38.8.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 aaa_base-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 aaa_base-extras-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 aaa_base-84.87+git20180409.04c9dae-1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 aaa_base-extras-84.87+git20180409.04c9dae-1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 aaa_base-84.87+git20180409.04c9dae-3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 aaa_base-extras-84.87+git20180409.04c9dae-3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 aaa_base-malloccheck-84.87+git20180409.04c9dae-1.8 as a component of SUSE Linux Enterprise Module for Development Tools 15 aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 aaa_base-11-6.38.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA aaa_base-11-6.65.1 as a component of SUSE Linux Enterprise Server 11 SP2 aaa_base-11-6.90.1 as a component of SUSE Linux Enterprise Server 11 SP3 aaa_base-11-6.105.1 as a component of SUSE Linux Enterprise Server 11 SP4 aaa_base-13.2+git20140911.61c1681-1.8 as a component of SUSE Linux Enterprise Server 12 aaa_base-extras-13.2+git20140911.61c1681-1.8 as a component of SUSE Linux Enterprise Server 12 aaa_base-13.2+git20140911.61c1681-9.1 as a component of SUSE Linux Enterprise Server 12 SP1 aaa_base-extras-13.2+git20140911.61c1681-9.1 as a component of SUSE Linux Enterprise Server 12 SP1 aaa_base-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Server 12 SP2 aaa_base-extras-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Server 12 SP2 aaa_base-13.2+git20140911.61c1681-36.1 as a component of SUSE Linux Enterprise Server 12 SP3 aaa_base-extras-13.2+git20140911.61c1681-36.1 as a component of SUSE Linux Enterprise Server 12 SP3 aaa_base-13.2+git20140911.61c1681-38.8.1 as a component of SUSE Linux Enterprise Server 12 SP4 aaa_base-extras-13.2+git20140911.61c1681-38.8.1 as a component of SUSE Linux Enterprise Server 12 SP4 aaa_base-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 aaa_base-extras-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 aaa_base-84.87+git20250429.1cad3bc-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 aaa_base-extras-84.87+git20250429.1cad3bc-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 aaa_base-malloccheck-84.87+git20250429.1cad3bc-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 aaa_base-wsl-84.87+git20250429.1cad3bc-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 aaa_base-yama-enable-ptrace-84.87+git20250429.1cad3bc-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 aaa_base-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 aaa_base-extras-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 aaa_base-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 aaa_base-extras-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 aaa_base-malloccheck-13.2+git20140911.61c1681-1.16 as a component of SUSE Linux Enterprise Software Development Kit 12 aaa_base-malloccheck-13.2+git20140911.61c1681-9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 aaa_base-malloccheck-13.2+git20140911.61c1681-28.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 aaa_base-malloccheck-13.2+git20140911.61c1681-36.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 aaa_base-malloccheck-13.2+git20140911.61c1681-38.8.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 aaa_base-malloccheck-13.2+git20140911.61c1681-38.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 aaa_base-84.87+git20230815.cab7b44-1.8 as a component of SUSE Linux Micro 6.0 aaa_base-84.87+git20240906.742565b-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 aaa_base-84.87+git20180409.04c9dae-lp150.1.1 as a component of openSUSE Leap 15.0 aaa_base-extras-84.87+git20180409.04c9dae-lp150.1.1 as a component of openSUSE Leap 15.0 aaa_base-13.2+git20160915.106a00d-1.1 as a component of openSUSE Tumbleweed aaa_base-extras-13.2+git20160915.106a00d-1.1 as a component of openSUSE Tumbleweed aaa_base-malloccheck-13.2+git20160915.106a00d-1.1 as a component of openSUSE Tumbleweed /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. CVE-2011-0461 SUSE Linux Enterprise Desktop 12:aaa_base-13.2+git20140911.61c1681-1.16 SUSE Linux Enterprise Desktop 12:aaa_base-extras-13.2+git20140911.61c1681-1.16 SUSE Linux Enterprise Desktop 12 SP1:aaa_base-13.2+git20140911.61c1681-9.1 SUSE Linux Enterprise Desktop 12 SP1:aaa_base-extras-13.2+git20140911.61c1681-9.1 SUSE Linux Enterprise Desktop 12 SP2:aaa_base-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Desktop 12 SP2:aaa_base-extras-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Desktop 12 SP3:aaa_base-13.2+git20140911.61c1681-36.1 SUSE Linux Enterprise Desktop 12 SP3:aaa_base-extras-13.2+git20140911.61c1681-36.1 SUSE Linux Enterprise Desktop 12 SP4:aaa_base-13.2+git20140911.61c1681-38.8.1 SUSE Linux Enterprise Desktop 12 SP4:aaa_base-extras-13.2+git20140911.61c1681-38.8.1 SUSE Linux Enterprise High Performance Computing 12 SP5:aaa_base-13.2+git20140911.61c1681-38.13.1 SUSE Linux Enterprise High Performance Computing 12 SP5:aaa_base-extras-13.2+git20140911.61c1681-38.13.1 SUSE Linux Enterprise Module for Basesystem 15:aaa_base-84.87+git20180409.04c9dae-1.8 SUSE Linux Enterprise Module for Basesystem 15:aaa_base-extras-84.87+git20180409.04c9dae-1.8 SUSE Linux Enterprise Module for Basesystem 15 SP1:aaa_base-84.87+git20180409.04c9dae-3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:aaa_base-extras-84.87+git20180409.04c9dae-3.6.1 SUSE Linux Enterprise Module for Development Tools 15:aaa_base-malloccheck-84.87+git20180409.04c9dae-1.8 SUSE Linux Enterprise Module for Development Tools 15 SP1:aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:aaa_base-11-6.38.1 SUSE Linux Enterprise Server 11 SP2:aaa_base-11-6.65.1 SUSE Linux Enterprise Server 11 SP3:aaa_base-11-6.90.1 SUSE Linux Enterprise Server 11 SP4:aaa_base-11-6.105.1 SUSE Linux Enterprise Server 12:aaa_base-13.2+git20140911.61c1681-1.8 SUSE Linux Enterprise Server 12:aaa_base-extras-13.2+git20140911.61c1681-1.8 SUSE Linux Enterprise Server 12 SP1:aaa_base-13.2+git20140911.61c1681-9.1 SUSE Linux Enterprise Server 12 SP1:aaa_base-extras-13.2+git20140911.61c1681-9.1 SUSE Linux Enterprise Server 12 SP2:aaa_base-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Server 12 SP2:aaa_base-extras-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Server 12 SP3:aaa_base-13.2+git20140911.61c1681-36.1 SUSE Linux Enterprise Server 12 SP3:aaa_base-extras-13.2+git20140911.61c1681-36.1 SUSE Linux Enterprise Server 12 SP4:aaa_base-13.2+git20140911.61c1681-38.8.1 SUSE Linux Enterprise Server 12 SP4:aaa_base-extras-13.2+git20140911.61c1681-38.8.1 SUSE Linux Enterprise Server 12 SP5:aaa_base-13.2+git20140911.61c1681-38.13.1 SUSE Linux Enterprise Server 12 SP5:aaa_base-extras-13.2+git20140911.61c1681-38.13.1 SUSE Linux Enterprise Server 16.0:aaa_base-84.87+git20250429.1cad3bc-160000.2.2 SUSE Linux Enterprise Server 16.0:aaa_base-extras-84.87+git20250429.1cad3bc-160000.2.2 SUSE Linux Enterprise Server 16.0:aaa_base-malloccheck-84.87+git20250429.1cad3bc-160000.2.2 SUSE Linux Enterprise Server 16.0:aaa_base-wsl-84.87+git20250429.1cad3bc-160000.2.2 SUSE Linux Enterprise Server 16.0:aaa_base-yama-enable-ptrace-84.87+git20250429.1cad3bc-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:aaa_base-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:aaa_base-extras-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:aaa_base-13.2+git20140911.61c1681-38.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:aaa_base-extras-13.2+git20140911.61c1681-38.13.1 SUSE Linux Enterprise Software Development Kit 12:aaa_base-malloccheck-13.2+git20140911.61c1681-1.16 SUSE Linux Enterprise Software Development Kit 12 SP1:aaa_base-malloccheck-13.2+git20140911.61c1681-9.1 SUSE Linux Enterprise Software Development Kit 12 SP2:aaa_base-malloccheck-13.2+git20140911.61c1681-28.1 SUSE Linux Enterprise Software Development Kit 12 SP3:aaa_base-malloccheck-13.2+git20140911.61c1681-36.1 SUSE Linux Enterprise Software Development Kit 12 SP4:aaa_base-malloccheck-13.2+git20140911.61c1681-38.8.1 SUSE Linux Enterprise Software Development Kit 12 SP5:aaa_base-malloccheck-13.2+git20140911.61c1681-38.13.1 SUSE Linux Micro 6.0:aaa_base-84.87+git20230815.cab7b44-1.8 SUSE Linux Micro 6.1:aaa_base-84.87+git20240906.742565b-slfo.1.1_1.2 openSUSE Leap 15.0:aaa_base-84.87+git20180409.04c9dae-lp150.1.1 openSUSE Leap 15.0:aaa_base-extras-84.87+git20180409.04c9dae-lp150.1.1 openSUSE Tumbleweed:aaa_base-13.2+git20160915.106a00d-1.1 openSUSE Tumbleweed:aaa_base-extras-13.2+git20160915.106a00d-1.1 openSUSE Tumbleweed:aaa_base-malloccheck-13.2+git20160915.106a00d-1.1 moderate 6.3 AV:L/AC:M/Au:N/C:N/I:C/A:C