VULNERABILITY INTELLIGENCE
CVE-2011-0461
CVSS score6.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2011-04-04
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:C/A:C
Description
/etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')