VDB
CVE-2011-0523
CVE-2011-0523
PUBLISHED
CVSS 1.899999976158142 LOW
gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwise restricted files via unspecified vectors.
EPSS 0.48% · 40.2th percentile
Risk Scores
CVSS 2.0
1.899999976158142
EPSS Score
0.48%
40.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| iain | gypsy | 0.8 |
Timeline
- Aug 13, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
References
- FEDORA-2013-8705 vendor-advisory
- 49991 third-party-advisory
- [oss-security] 20110125 Re: CVE request: multiple gypsy vulnerabilities mailing-list
- FEDORA-2013-8659 vendor-advisory
- http://cgit.freedesktop.org/gypsy/commit/?id=40101707cddb319481133b2a137294b6b669bd16 exploit
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106919.html technical
- http://www.openwall.com/lists/oss-security/2011/01/24/10 technical
- https://nvd.nist.gov/vuln/detail/CVE-2011-0523 advisory
- https://bugs.freedesktop.org/show_bug.cgi?id=33431 url
- https://bugs.launchpad.net/ubuntu/+source/gypsy/+bug/690323 url
- http://lists.opensuse.org/opensuse-updates/2012-07/msg00034.html url