Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

kbd: arbitrary file corruption

Package(s):

kbd

CVE #(s):

CVE-2011-0460

Created:

April 18, 2011

Updated:

April 20, 2011

Description:

From the openSUSE advisory:

The kbd init scripted wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files

Alerts:

SUSE	SUSE-SR:2011:007	2011-04-19
openSUSE	openSUSE-SU-2011:0357-1	2011-04-18

(Log in to post comments)