Local privilege escalation via insecure file permissions (CVE-2016-1611)

  • 7017689
  • 09-Jun-2016
  • 30-Jun-2016

Environment

Novell Filr 2.0
Novell Filr 1.2

Situation

A privilege escalation vulnerability was found in Filr 1.2/2.0 that may allow a local attacker to elevate privileges to root via an unspecified file with insecure file permissions.

Resolution

A fix for this issue is available in the Filr 2.0 Hot Patch 2 and Filr 1.2 Hot Patch 6, available via the Novell Patch Finder.

Additional Information

See also: TID 7017791

CVE-2016-1611.
Special thanks to Wolfgang Ettlinger working with SEC Consult Vulnerability Lab for reporting this vulnerability to Micro Focus.