Vulnerability in SUSE Linux

CVE-2009-1648

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services.

EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.

Affected products

Suse Suse_linux — versions 11
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUSE, Vendor Advisory)