CVE-2009-1648 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-1648 Interim 1 8 2022-03-01T00:42:32Z current 2021-05-30T12:47:02Z 2022-03-01T00:42:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-1648 The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html E-Mail link for SUSE-SR:2009:012 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server for SAP Applications 11 yast2-ldap-server-2.17.21-0.1.1 yast2-ldap-server-2.17.21-0.1.1 as a component of SUSE Linux Enterprise Server 11 yast2-ldap-server-2.17.21-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 (aka SLE11) does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services. CVE-2009-1648 SUSE Linux Enterprise Server 11:yast2-ldap-server-2.17.21-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:yast2-ldap-server-2.17.21-0.1.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P