CVE-2011-3151

CVE-2011-3151 describes a vulnerability in the Ubuntu SELinux initscript (before version 1:0.10) where it used the 'touch' command to create a lockfile in a world-writable directory. If the operating system kernel lacked symlink protections, an attacker could exploit this to create a zero-byte file on any writable filesystem. This vulnerability has a CVSS score of 5.9 (Medium), indicating a network-based attack with high complexity and potential for high impact on integrity, but no confidentiality or availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.