Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-3366HistoryJul 03, 2012 - 4:40 p.m.
CVE-2012-3366
2012-07-0316:40:35
Debian Security Bug Tracker
security-tracker.debian.org
9
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
75.5%
The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shell metacharacters in the UUID field to the server process (bcfg2-server).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | bcfg2 | < 1.2.2-2 | bcfg2_1.2.2-2_all.deb |
Related
nessus
nessus
Fedora 17 : bcfg2-1.2.3-1.fc17 (2012-10391)
2012-10-29 00:00:00
Debian DSA-2503-1 : bcfg2 - shell command injection
2012-06-29 00:00:00
Fedora 16 : bcfg2-1.2.3-1.fc16 (2012-10402)
2012-10-29 00:00:00
openvas
openvas
Fedora Update for bcfg2 FEDORA-2012-10402
2012-10-29 00:00:00
Debian: Security Advisory (DSA-2503-1)
2012-08-10 00:00:00
Debian Security Advisory DSA 2503-1 (bcfg2)
2012-08-10 00:00:00
cvelist
cvelist
CVE-2012-3366
2012-07-03 16:00:00
securityvulns
securityvulns
bcfg2 shell chatacters vulnerability
2012-07-09 00:00:00
[SECURITY] [DSA 2503-1] bcfg2 security update
2012-07-09 00:00:00
prion
prion
Code injection
2012-07-03 16:40:00
nvd
nvd
CVE-2012-3366
2012-07-03 16:40:35
cve
cve
CVE-2012-3366
2012-07-03 16:40:35
debian
debian
[SECURITY] [DSA 2503-1] bcfg2 security update
2012-06-28 17:49:45
fedora
fedora
[SECURITY] Fedora 17 Update: bcfg2-1.2.3-1.fc17
2012-10-28 00:56:56
[SECURITY] Fedora 16 Update: bcfg2-1.2.3-1.fc16
2012-10-28 00:56:07
ubuntucve
ubuntucve
CVE-2012-3366
2012-07-03 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
75.5%
Related for DEBIANCVE:CVE-2012-3366