CVE-2011-4190

The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files).

CVSS v3 5.3 MEDIUM
CVSS v2.0 3.5 LOW

5.3^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://bugzilla.suse.com/show_bug.cgi?id=722440
https://www.suse.com/security/cve/CVE-2011-4190/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1::::::
	cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1::::::
	cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1::::sap_aio::*
	cpe:2.3:o:suse:suse_linux_enterprise_server:11.0:sp1:::ltss:::*

History

07 Nov 2023, 02:09

Type	Values Removed	Values Added
References	~~(CONFIRM) https://bugzilla.suse.com/show_bug.cgi?id=722440 - Issue Tracking~~	() https://bugzilla.suse.com/show_bug.cgi?id=722440 -
References	~~(CONFIRM) https://www.suse.com/security/cve/CVE-2011-4190/ - Vendor Advisory~~	() https://www.suse.com/security/cve/CVE-2011-4190/ -

Information

Published : 2018-06-08 17:29

Updated : 2023-12-10 12:30

NVD link : CVE-2011-4190

Mitre link : CVE-2011-4190

CVE.ORG link : CVE-2011-4190

JSON object : View

Products Affected

suse

suse_linux_enterprise_desktop
suse_linux_enterprise_server

CWE

CWE-310

Cryptographic Issues

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2011-4190", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}, {"type": "Secondary", "source": "security@opentext.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2018-06-08T17:29:00.223", "references": [{"url": "https://bugzilla.suse.com/show_bug.cgi?id=722440", "source": "security@opentext.com"}, {"url": "https://www.suse.com/security/cve/CVE-2011-4190/", "source": "security@opentext.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}, {"type": "Secondary", "source": "security@opentext.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this flaw to impersonate the correct kdump server to obtain security sensitive information (kdump core files)."}, {"lang": "es", "value": "La implementaci\u00f3n kdump carece de la verificaci\u00f3n de clave host en la integraci\u00f3n OpenSSH de kdump y mkdumprd de kdump en versiones anteriores al 2012-01-20. Esto es similar a CVE-2011-3588, pero se diferencian en que la implementaci\u00f3n de kdump es espec\u00edfica de SUSE. Un servidor kdump malicioso remoto podr\u00eda emplear este error para suplantar el servidor kdump correcto y obtener informaci\u00f3n sensible para la seguridad (archivos core de kdump)."}], "lastModified": "2023-11-07T02:09:17.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_desktop:11:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10A193CD-12B9-4236-8A2C-E8CEAE592952"}, {"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F691F4E7-2FF1-4EFB-B21F-E510049A9940"}, {"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp1:*:*:*:sap_aio:*:*", "vulnerable": true, "matchCriteriaId": "3E8EA84C-9D8F-4F9D-8C1F-CD7C7D261876"}, {"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11.0:sp1:*:*:ltss:*:*:*", "vulnerable": true, "matchCriteriaId": "EB618625-F788-4773-9BDD-BA9D2648A38E"}], "operator": "OR"}]}], "sourceIdentifier": "security@opentext.com"}