What’s Vulnerable › Vulnerabilities

CVE-2014-0595

• Severity: low (CVSS 2.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-08 · updated 2026-06-17
• Weakness: CWE-119

Description

/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server (OES) 11 Linux SP2 does not properly manage a certain array, which allows local users to obtain the S permission in opportunistic circumstances by leveraging the granting of the F permission by an administrator.

Affected products

• Micro Focus International Open Enterprise Server: 11.0-sp2

References

• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00030.html
• http://www.novell.com/support/kb/doc.php?id=7014932
• http://www.securityfocus.com/bid/67144
• http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00030.html
• http://www.novell.com/support/kb/doc.php?id=7014932
• http://www.securityfocus.com/bid/67144

Get alerted when CVE-2014-0595 or the next vulnerability affects your stack