Lucene search

[email protected]CVE-2011-2651

HistoryAug 23, 2011 - 9:55 p.m.

CVE-2011-2651

2011-08-2321:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2011-2651

kiwi

suse studio

remote code execution

vulnerability

nvd

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.057 Low

EPSS

Percentile

93.3%

JSON

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.

CPENameOperatorVersion
marcus_schafer:kiwimarcus schafer kiwile3.74.1
novell:suse_studio_onsitenovell suse studio onsiteeq1.1

CPE	Name	Operator	Version
marcus_schafer:kiwi	marcus schafer kiwi	le	3.74.1
novell:suse_studio_onsite	novell suse studio onsite	eq	1.1

References

lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

support.novell.com/security/cve/CVE-2011-2651.html

www.securityfocus.com/bid/49236

bugzilla.novell.com/show_bug.cgi?id=702041

exchange.xforce.ibmcloud.com/vulnerabilities/69286

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.057 Low

EPSS

Percentile

93.3%

JSON

Related for CVE-2011-2651

prion1 cvelist1 suse1