New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2008-4636

NVDCIRCLENISA

EUVD-2008-4616 · Published Nov 27, 2008

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.

Technologies

Suse Linux Enterprise ServerSuse Suse Linux Enterprise DesktopSuse Suse Linux Enterprise ServerNovell Linux DesktopOpensuse OpensuseSuse Yast2-BackupNovell Open Enterprise Server

Weaknesses

CWE-78

CVSS scores

  • v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Privilege Escalation

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot