CVE:CVE-2011-0460
CNNVD:CNNVD-201404-351
kbd是一个包含了键盘映射表和键盘工具的软件包。
SUSE kbd 1.14.1及之前版本的初始化脚本存在安全漏洞。本地攻击者可通过对/dev/shm/defkeymap.map文件实施符号链接攻击利用该漏洞覆盖任意文件。
solution:Upgrade kbd-project kbd to a higher version than 1.14.1,0.99,1.01,1.03,1.04,1.05,1.06,1.08,1.10,1.11,1.12,1.13,1.14,and avoid the version (,1.14.1],0.99,1.01,1.03,1.04,1.05,1.06,1.08,1.10,1.11,1.12,1.13,1.14; Upgrade opensuse opensuse to a higher version than 11.2,11.3,and avoid the version 11.2,11.3