CVE-2011-2490
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the...
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
Exploit likelihood
What each source reports
NVD Score used
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
- Record
CVE-2011-2490- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
- Record
CVE-2011-2490- Updated
- 2026-11-02
EUVDEUVD-2011-2477 No score
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
- Record
EUVD-2011-2477- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8p43-wpgc-4fh2 No score
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the...
opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes.
- Record
GHSA-8p43-wpgc-4fh2- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10550-1 No score
opie-2.4-726.12 on GA media
These are all security issues fixed in the opie-2.4-726.12 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10550-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opieDebian:6.0 From an advisory covering 2 CVEs |
before 2.32.dfsg.1-0.2+squeeze1, plus listed versions 2.32.dfsg.1-0.2 |
2.32.dfsg.1-0.2+squeeze1 |
opieDebian:5.0 From an advisory covering 2 CVEs |
before 2.32-10.2+lenny2, plus listed versions 2.32-10.22.32-10.2+lenny1 |
2.32-10.2+lenny2 |
opieopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 2.4-726.12 | 2.4-726.12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2490 is a high vulnerability (CVSS 7.2) in Nrl Opie, published July 21, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2011/06/23/5
hermes.opensuse.org/messages/10082052
bugzilla.novell.com/show_bug.cgi?id=698772
debian.org/security/2011/dsa-2281
secunia.com/advisories/39966
Show 10 moreShow less
bugs.debian.org/cgi-bin/bugreport.cgi?bug=631345
securityfocus.com/bid/48390
bugzillafiles.novell.org/attachment.cgi?id=435901
nvd.nist.gov/vuln/detail/CVE-2011-2490
github.com/advisories/GHSA-8p43-wpgc-4fh2
suse.com/security/cve/CVE-2011-2489