CVE-2008-4636

Summary

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.

Impact & exploitability

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html ↗

Additional information

• NVD record
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.htmlPatch
• http://secunia.com/advisories/32832Patch
• http://www.securityfocus.com/bid/32464Patch
• http://osvdb.org/50284
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46879Advisory