CVE-2008-2388 - Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack v

CVE-2008-2388

Summary

Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors. NOTE: the vendor states that these "can be considered no security problem."

References

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
http://secunia.com/advisories/30581

Vulnerable Configurations

cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 11-09-2008 - 01:10)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

secunia	30581
suse	SUSE-SR:2008:012

Last major update

11-09-2008 - 01:10

Published

06-06-2008 - 22:32

Last modified

11-09-2008 - 01:10