CVE-2011-3177 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2011-3177 Interim 1 32 2025-04-22T23:49:09Z current 2021-05-30T12:59:27Z 2025-04-22T23:49:09Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2011-3177 The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 openSUSE Leap 15.0 openSUSE Tumbleweed yast2 yast2-2.17.119-0.5.25 yast2-2.17.129-0.7.2 yast2-2.17.140-1.1 yast2-3.1.108-1.16 yast2-3.1.108-1.6 yast2-3.1.155-1.13 yast2-3.1.206-36.3 yast2-3.1.206-37.1.2 yast2-3.2.36-1.11 yast2-3.2.48-3.29.20 yast2-3.2.50-4.7.1 yast2-3.2.7-1.1 yast2-4.0.74-lp150.1.1 yast2-4.0.77-1.1 yast2-core yast2-core-2.17.44-0.5.3 yast2-core-2.17.45-0.5.1 yast2-core-2.17.46-0.5.1 yast2-core-3.1.11-1.9 yast2-core-3.1.18-1.5 yast2-core-3.1.23-6.38 yast2-core-3.2.0-1.1 yast2-core-3.2.2-1.29 yast2-core-3.3.1-1.7 yast2-core-4.0.2-1.16 yast2-core-4.0.2-lp150.1.3 yast2-core-debugger-3.2.0-1.1 yast2-core-devel-2.17.46-0.5.1 yast2-core-devel-3.1.11-1.9 yast2-core-devel-3.1.18-1.5 yast2-core-devel-3.1.23-6.38 yast2-core-devel-3.2.0-1.1 yast2-core-devel-3.2.2-1.29 yast2-core-devel-3.3.1-1.7 yast2-core-devel-4.0.2-1.16 yast2-devel-doc-2.17.140-1.1 yast2-devel-doc-3.1.108-1.16 yast2-devel-doc-3.1.155-1.13 yast2-logs-4.6.2-4.4 yast2-logs-4.6.2-slfo.1.1_1.1 yast2-3.1.108-1.16 as a component of SUSE Linux Enterprise Desktop 12 yast2-core-3.1.11-1.9 as a component of SUSE Linux Enterprise Desktop 12 yast2-3.1.155-1.13 as a component of SUSE Linux Enterprise Desktop 12 SP1 yast2-core-3.1.18-1.5 as a component of SUSE Linux Enterprise Desktop 12 SP1 yast2-3.1.206-37.1.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 yast2-core-3.1.23-6.38 as a component of SUSE Linux Enterprise Desktop 12 SP2 yast2-3.2.36-1.11 as a component of SUSE Linux Enterprise Desktop 12 SP3 yast2-core-3.2.2-1.29 as a component of SUSE Linux Enterprise Desktop 12 SP3 yast2-3.2.48-3.29.20 as a component of SUSE Linux Enterprise Desktop 12 SP4 yast2-core-3.3.1-1.7 as a component of SUSE Linux Enterprise Desktop 12 SP4 yast2-3.2.50-4.7.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 yast2-core-3.3.1-1.7 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 yast2-4.0.77-1.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 yast2-core-4.0.2-1.16 as a component of SUSE Linux Enterprise Module for Basesystem 15 yast2-core-devel-4.0.2-1.16 as a component of SUSE Linux Enterprise Module for Basesystem 15 yast2-2.17.119-0.5.25 as a component of SUSE Linux Enterprise Server 11 SP2 yast2-core-2.17.44-0.5.3 as a component of SUSE Linux Enterprise Server 11 SP2 yast2-2.17.129-0.7.2 as a component of SUSE Linux Enterprise Server 11 SP3 yast2-core-2.17.45-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP3 yast2-2.17.140-1.1 as a component of SUSE Linux Enterprise Server 11 SP4 yast2-core-2.17.46-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP4 yast2-3.1.108-1.6 as a component of SUSE Linux Enterprise Server 12 yast2-core-3.1.11-1.9 as a component of SUSE Linux Enterprise Server 12 yast2-3.1.155-1.13 as a component of SUSE Linux Enterprise Server 12 SP1 yast2-core-3.1.18-1.5 as a component of SUSE Linux Enterprise Server 12 SP1 yast2-3.1.206-37.1.2 as a component of SUSE Linux Enterprise Server 12 SP2 yast2-core-3.1.23-6.38 as a component of SUSE Linux Enterprise Server 12 SP2 yast2-3.2.36-1.11 as a component of SUSE Linux Enterprise Server 12 SP3 yast2-core-3.2.2-1.29 as a component of SUSE Linux Enterprise Server 12 SP3 yast2-3.2.48-3.29.20 as a component of SUSE Linux Enterprise Server 12 SP4 yast2-core-3.3.1-1.7 as a component of SUSE Linux Enterprise Server 12 SP4 yast2-3.2.50-4.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 yast2-core-3.3.1-1.7 as a component of SUSE Linux Enterprise Server 12 SP5 yast2-3.1.206-36.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 yast2-core-3.1.23-6.38 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 yast2-3.2.50-4.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 yast2-core-3.3.1-1.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 yast2-core-devel-2.17.46-0.5.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 yast2-devel-doc-2.17.140-1.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 yast2-core-devel-3.1.11-1.9 as a component of SUSE Linux Enterprise Software Development Kit 12 yast2-devel-doc-3.1.108-1.16 as a component of SUSE Linux Enterprise Software Development Kit 12 yast2-core-devel-3.1.18-1.5 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 yast2-devel-doc-3.1.155-1.13 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 yast2-core-devel-3.1.23-6.38 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 yast2-core-devel-3.2.2-1.29 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 yast2-core-devel-3.3.1-1.7 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 yast2-core-devel-3.3.1-1.7 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 yast2-logs-4.6.2-4.4 as a component of SUSE Linux Micro 6.0 yast2-logs-4.6.2-slfo.1.1_1.1 as a component of SUSE Linux Micro 6.1 yast2-4.0.74-lp150.1.1 as a component of openSUSE Leap 15.0 yast2-core-4.0.2-lp150.1.3 as a component of openSUSE Leap 15.0 yast2-3.2.7-1.1 as a component of openSUSE Tumbleweed yast2-core-3.2.0-1.1 as a component of openSUSE Tumbleweed yast2-core-debugger-3.2.0-1.1 as a component of openSUSE Tumbleweed yast2-core-devel-3.2.0-1.1 as a component of openSUSE Tumbleweed yast2 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS yast2-core as a component of SUSE Linux Enterprise Point of Service 11 SP3 yast2-core as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata yast2-core as a component of SUSE Linux Enterprise Server 11 SP4 LTSS yast2 as a component of SUSE Linux Enterprise Server 15 yast2 as a component of SUSE Linux Enterprise Server 15-ESPOS yast2 as a component of SUSE Linux Enterprise Server 15-LTSS yast2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks. CVE-2011-3177 SUSE Linux Enterprise Desktop 12:yast2-3.1.108-1.16 SUSE Linux Enterprise Desktop 12:yast2-core-3.1.11-1.9 SUSE Linux Enterprise Desktop 12 SP1:yast2-3.1.155-1.13 SUSE Linux Enterprise Desktop 12 SP1:yast2-core-3.1.18-1.5 SUSE Linux Enterprise Desktop 12 SP2:yast2-3.1.206-37.1.2 SUSE Linux Enterprise Desktop 12 SP2:yast2-core-3.1.23-6.38 SUSE Linux Enterprise Desktop 12 SP3:yast2-3.2.36-1.11 SUSE Linux Enterprise Desktop 12 SP3:yast2-core-3.2.2-1.29 SUSE Linux Enterprise Desktop 12 SP4:yast2-3.2.48-3.29.20 SUSE Linux Enterprise Desktop 12 SP4:yast2-core-3.3.1-1.7 SUSE Linux Enterprise High Performance Computing 12 SP5:yast2-3.2.50-4.7.1 SUSE Linux Enterprise High Performance Computing 12 SP5:yast2-core-3.3.1-1.7 SUSE Linux Enterprise Module for Basesystem 15:yast2-4.0.77-1.1 SUSE Linux Enterprise Module for Basesystem 15:yast2-core-4.0.2-1.16 SUSE Linux Enterprise Module for Basesystem 15:yast2-core-devel-4.0.2-1.16 SUSE Linux Enterprise Server 11 SP2:yast2-2.17.119-0.5.25 SUSE Linux Enterprise Server 11 SP2:yast2-core-2.17.44-0.5.3 SUSE Linux Enterprise Server 11 SP3:yast2-2.17.129-0.7.2 SUSE Linux Enterprise Server 11 SP3:yast2-core-2.17.45-0.5.1 SUSE Linux Enterprise Server 11 SP4:yast2-2.17.140-1.1 SUSE Linux Enterprise Server 11 SP4:yast2-core-2.17.46-0.5.1 SUSE Linux Enterprise Server 12:yast2-3.1.108-1.6 SUSE Linux Enterprise Server 12:yast2-core-3.1.11-1.9 SUSE Linux Enterprise Server 12 SP1:yast2-3.1.155-1.13 SUSE Linux Enterprise Server 12 SP1:yast2-core-3.1.18-1.5 SUSE Linux Enterprise Server 12 SP2:yast2-3.1.206-37.1.2 SUSE Linux Enterprise Server 12 SP2:yast2-core-3.1.23-6.38 SUSE Linux Enterprise Server 12 SP3:yast2-3.2.36-1.11 SUSE Linux Enterprise Server 12 SP3:yast2-core-3.2.2-1.29 SUSE Linux Enterprise Server 12 SP4:yast2-3.2.48-3.29.20 SUSE Linux Enterprise Server 12 SP4:yast2-core-3.3.1-1.7 SUSE Linux Enterprise Server 12 SP5:yast2-3.2.50-4.7.1 SUSE Linux Enterprise Server 12 SP5:yast2-core-3.3.1-1.7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:yast2-3.1.206-36.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:yast2-core-3.1.23-6.38 SUSE Linux Enterprise Server for SAP Applications 12 SP5:yast2-3.2.50-4.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:yast2-core-3.3.1-1.7 SUSE Linux Enterprise Software Development Kit 11 SP4:yast2-core-devel-2.17.46-0.5.1 SUSE Linux Enterprise Software Development Kit 11 SP4:yast2-devel-doc-2.17.140-1.1 SUSE Linux Enterprise Software Development Kit 12:yast2-core-devel-3.1.11-1.9 SUSE Linux Enterprise Software Development Kit 12:yast2-devel-doc-3.1.108-1.16 SUSE Linux Enterprise Software Development Kit 12 SP1:yast2-core-devel-3.1.18-1.5 SUSE Linux Enterprise Software Development Kit 12 SP1:yast2-devel-doc-3.1.155-1.13 SUSE Linux Enterprise Software Development Kit 12 SP2:yast2-core-devel-3.1.23-6.38 SUSE Linux Enterprise Software Development Kit 12 SP3:yast2-core-devel-3.2.2-1.29 SUSE Linux Enterprise Software Development Kit 12 SP4:yast2-core-devel-3.3.1-1.7 SUSE Linux Enterprise Software Development Kit 12 SP5:yast2-core-devel-3.3.1-1.7 SUSE Linux Micro 6.0:yast2-logs-4.6.2-4.4 SUSE Linux Micro 6.1:yast2-logs-4.6.2-slfo.1.1_1.1 openSUSE Leap 15.0:yast2-4.0.74-lp150.1.1 openSUSE Leap 15.0:yast2-core-4.0.2-lp150.1.3 openSUSE Tumbleweed:yast2-3.2.7-1.1 openSUSE Tumbleweed:yast2-core-3.2.0-1.1 openSUSE Tumbleweed:yast2-core-debugger-3.2.0-1.1 openSUSE Tumbleweed:yast2-core-devel-3.2.0-1.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:yast2 SUSE Linux Enterprise Point of Service 11 SP3:yast2-core SUSE Linux Enterprise Server 11 SP3 for Teradata:yast2-core SUSE Linux Enterprise Server 11 SP4 LTSS:yast2-core SUSE Linux Enterprise Server 15-ESPOS:yast2 SUSE Linux Enterprise Server 15-LTSS:yast2 SUSE Linux Enterprise Server 15:yast2 SUSE Linux Enterprise Server for SAP Applications 15:yast2 important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H