CVE-2011-0988: Novell Suse Linux

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors.

Affected products

• Novell Suse Linux: version 10 only; version 11 only
• Pureftpd Pure-Ftpd: version 1.0.22 only

Published 2011-04-18. Last modified 2026-06-16.