| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 5.9 | $0-$5k | 0.42 |
A vulnerability was found in OpenSUSE 11.0/11.1. It has been declared as problematic. Affected by this vulnerability is some unknown processing. The manipulation with an unknown input leads to a privilege escalation vulnerability. The CWE definition for the vulnerability is CWE-78. As an impact it is known to affect confidentiality, integrity, and availability.
The weakness was published 03/11/2009 with SuSE (Website). It is possible to read the advisory at xforce.iss.net. This vulnerability is known as CVE-2009-0848 since 03/09/2009. Attacking locally is a requirement. The exploitation doesn’t need any form of authentication. The technical details are unknown and an exploit is not publicly available.
The vulnerability scanner Nessus provides a plugin with the ID 40229 (openSUSE Security Update : gtk2 (gtk2-583)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family SuSE Local Security Checks.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
The vulnerability is also documented in the databases at SecurityFocus (BID 34068), X-Force (49228), Secunia (SA34259), Vulnerability Center (SBV-22967) and Tenable (40229). Similar entries are available at 9596, 45965, 45311 and 45308.
Name
VulDB Meta Base Score: 5.9
VulDB Meta Temp Score: 5.9
VulDB Base Score: 5.9
VulDB Temp Score: 5.9
VulDB Vector: 🔍
VulDB Reliability: 🔍
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Class: Privilege escalation
CWE: CWE-78
ATT&CK: Unknown
Local: Yes
Remote: No
Availability: 🔍
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 40229
Nessus Name: openSUSE Security Update : gtk2 (gtk2-583)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Port: 🔍
OpenVAS ID: 63535
OpenVAS Name: SuSE Security Summary SUSE-SR:2009:006
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍Recommended: no mitigation known
Status: 🔍
0-Day Time: 🔍
03/09/2009 🔍
03/10/2009 🔍
03/10/2009 🔍
03/11/2009 🔍
03/11/2009 🔍
03/11/2009 🔍
07/21/2009 🔍
07/28/2009 🔍
03/17/2015 🔍
08/05/2021 🔍Advisory: xforce.iss.net
Organization: SuSE
Status: Not defined
CVE: CVE-2009-0848 (🔍)
SecurityFocus: 34068 – openSUSE Linux gtk2 Package Search Path Remote Command Execution Vulnerability
Secunia: 34259 – SUSE Update for Multiple Packages, Highly Critical
X-Force: 49228
Vulnerability Center: 22967 – OpenSUSE 11.0 and 11.1 GTK2 Untrusted Search Path Vulnerability Allows Local Code Execution, High
See also: 🔍
Created: 03/17/2015 23:38
Updated: 08/05/2021 02:18
Changes: (3) source_nessus_risk exploit_price_0day vulnerability_cvss2_nvd_basescore
Complete: 🔍
Download it now for free!
