Candidate: CVE-2011-1011
PublicDate: 2011-02-24 21:00:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1011
Description:
 The seunshare_mount function in sandbox/seunshare.c in seunshare in certain
 Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat
 Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a
 new directory on top of /tmp without assigning root ownership and the
 sticky bit to this new directory, which allows local users to replace or
 delete arbitrary /tmp files, and consequently cause a denial of service or
 possibly gain privileges, by running a setuid application that relies on
 /tmp, as demonstrated by the ksu application.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS: 

Patches_policycoreutils:
 upstream: http://pkgs.fedoraproject.org/gitweb/?p=policycoreutils.git;a=blob;f=policycoreutils-rhat.patch;h=d4db5bc06027de23d12a4b3f18fa6f9b1517df27;hb=HEAD#l2197
upstream_policycoreutils: released (2.0.85)
dapper_policycoreutils: ignored (reached end-of-life)
hardy_policycoreutils: ignored (reached end-of-life)
karmic_policycoreutils: ignored (reached end-of-life)
lucid_policycoreutils: ignored (reached end-of-life)
maverick_policycoreutils: ignored (reached end-of-life)
natty_policycoreutils: ignored (reached end-of-life)
oneiric_policycoreutils: ignored (reached end-of-life)
precise_policycoreutils: ignored (reached end-of-life)
precise/esm_policycoreutils: DNE (precise was needs-triage)
quantal_policycoreutils: ignored (reached end-of-life)
raring_policycoreutils: ignored (reached end-of-life)
saucy_policycoreutils: ignored (reached end-of-life)
trusty_policycoreutils: ignored (out of standard support)
trusty/esm_policycoreutils: not-affected (2.2.5-1)
utopic_policycoreutils: ignored (reached end-of-life)
vivid_policycoreutils: ignored (reached end-of-life)
vivid/stable-phone-overlay_policycoreutils: DNE
vivid/ubuntu-core_policycoreutils: DNE
wily_policycoreutils: ignored (reached end-of-life)
xenial_policycoreutils: not-affected (2.2.5-1)
yakkety_policycoreutils: ignored (reached end-of-life)
zesty_policycoreutils: ignored (reached end-of-life)
artful_policycoreutils: ignored (reached end-of-life)
bionic_policycoreutils: not-affected (2.2.5-1)
cosmic_policycoreutils: ignored (reached end-of-life)
disco_policycoreutils: not-affected (2.2.5-1)
devel_policycoreutils: not-affected (2.2.5-1)