Vulnerability in Opensuse

CVE-2012-0427

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.

EPSS: 0.005 (39.3th percentile) — read the EPSS interpretation.

Affected products

Opensuse — versions 11.4
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Exploit)
cve@mitre.org (x_refsource_CONFIRM)