Lucene search
HistoryApr 16, 2014 - 6:37 p.m.
CVE-2011-3180
kiwi
cve-2011-3180
shell metacharacters
arbitrary commands
security vulnerability
7.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
83.0%
kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.
Related
cvelist
cvelist
CVE-2011-3180
2014-04-16 18:00:00
prion
prion
Design/Logic Flaw
2014-04-16 18:37:00
suse
suse
Security update for SUSE Studio Onsite 1.2 and kiwi (critical)
2011-12-15 01:08:52
7.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
83.0%
Related for CVE-2011-3180