What’s Vulnerable › Vulnerabilities

CVE-2011-0988

• Severity: medium (CVSS 4.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-04-18 · updated 2026-06-16
• Weakness: CWE-264

Description

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.

Affected products

• Novell Suse Linux: 10-sp3, 10-sp4, 11-sp3, 11-sp4
• Pureftpd Pure-Ftpd: 1.0.22

References

• http://secunia.com/advisories/44039
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66618
• https://hermes.opensuse.org/messages/7849430
• http://secunia.com/advisories/44039
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66618
• https://hermes.opensuse.org/messages/7849430

Get alerted when CVE-2011-0988 or the next vulnerability affects your stack