Lucene search

[email protected]CVE-2011-2649

HistoryAug 23, 2011 - 9:55 p.m.

CVE-2011-2649

2011-08-2321:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2011-2649

kiwi

suse studio

arbitrary command execution

shell metacharacters

nvd

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.5%

JSON

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.

CPENameOperatorVersion
marcus_schafer:kiwimarcus schafer kiwile3.74.1
novell:suse_studio_onsitenovell suse studio onsiteeq1.1

CPE	Name	Operator	Version
marcus_schafer:kiwi	marcus schafer kiwi	le	3.74.1
novell:suse_studio_onsite	novell suse studio onsite	eq	1.1

References

lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

support.novell.com/security/cve/CVE-2011-2649.html

www.securityfocus.com/bid/49236

bugzilla.novell.com/show_bug.cgi?id=701815

exchange.xforce.ibmcloud.com/vulnerabilities/69284

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.5%

JSON

Related for CVE-2011-2649

cvelist1 prion1 suse1