yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 prior to 2008.11.26-0.9.1 and 2012.9.13 prior to 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
opensuse opensuse 11.4 |