CVE-2008-4636

HIGH CVSS: 7.2 Published: 2008-11-27 Modified: 2026-06-16

Description

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process.

Affected Platforms

Suse Suse Linux Enterprise ServerNovell Open Enterprise ServerSuse Yast2-BackupSuse Suse Linux Enterprise DesktopOpensuse OpensuseNovell Linux DesktopSuse Linux Enterprise Server

Weakness Type

CWE-78

References

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html
http://osvdb.org/50284
http://secunia.com/advisories/32832
http://www.securityfocus.com/bid/32464
https://exchange.xforce.ibmcloud.com/vulnerabilities/46879
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00003.html