CVE-2011-0461: /etc/init.d/boot.localfs in the aaa_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3...

Security readout for executives and security teams

This flaw affects old openSUSE aaa_base startup logic. A local user could abuse a temporary /dev/shm/mtab symlink to overwrite files. The risk is mainly on legacy systems where untrusted users have shell or local access. Exposure is limited to openSUSE 11.2 or 11.3 systems with vulnerable aaa_base package versions and local user access. The provided affected-product metadata is incomplete, so validate package versions directly. Treat as moderate priority for legacy Linux estates. It is not a remote takeover issue, but local file overwrite can support privilege escalation or system damage on shared hosts. Mitigation focus: Update aaa_base to 11.2-43.48.1, 11.3-8.7.1, or later vendor-supported builds.; Check the referenced SUSE/openSUSE advisories for exact package guidance.; Restrict local shell access on affected legacy hosts until remediated..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.