CVE-2011-2649

Kiwi before 3.74.2 (as used in SUSE Studio 1.1 before 1.1.4) is vulnerable to command execution via shell metacharacters in an unspecified FileUtils function. The root cause is not fully detailed in the provided documents, but the vulnerability allows an attacker to execute arbitrary commands. Th...

CVE-2011-2649

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call...

system-config-printer: possible arbitrary code execution in pysmb.py due to improper escaping of hostnames

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...

PT-2011-1147

Name of the Vulnerable Software and Affected Versions system-config-printer versions 0.6.x through 0.7.x system-config-printer-libs versions 0.7.32.10 system-config-printer-gui versions 0.6.116.10 Description The issue allows remote SMB servers to execute arbitrary commands via shell metacharacte...

PT-2011-3998

Name of the Vulnerable Software and Affected Versions Kiwi versions prior to 3.74.2 SUSE Studio versions prior to 1.1.4 Description The issue allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call. Recommendations For Kiwi versions prior ...

CVE-2011-2649: Improper Input Validation

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

UBUNTU-CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

CVE-2011-1412

sys/sysunix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fsgame variable...

PT-2011-3108

Name of the Vulnerable Software and Affected Versions ioQuake3 engine versions prior to 1.5.1.1 World of Padman versions 1.5.x prior to 1.5.1.1 OpenArena versions 0.8.x-15 and 0.8.x-16 Description The issue allows remote game servers to execute arbitrary commands via shell metacharacters in a lon...

[slackware-security] dhcpcd (SSA:2011-210-02)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2011-210-02 New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+...

CVE-2011-2471

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...

Design/Logic Flaw

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...

CVE-2011-2471

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...

CVE-2011-2471

CVE-2011-2471 concerns utils/opcontrol in OProfile 0.9.6 and earlier, where local users could gain privileges via shell metacharacters in (1) --vmlinux, (2) --session-dir, or (3) --xen, tied to the daemonrc file and the do_save_setup/do_load_setup functions. The related OpenVAS/Nessus entries cor...

Design/Logic Flaw

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...

CVE-2011-1760

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument...

CVE-2011-2471: Undefined Security Weakness

utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the 1 --vmlinux, 2 --session-dir, or 3 --xen argument, related to the daemonrc file and the dosavesetup and doloadsetup functions, a different vulnerability than CVE-2011-1760...

PT-2011-3354

Name of the Vulnerable Software and Affected Versions OProfile versions 0.9.6 and earlier Description The issue allows local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument. This is related to the utils/opcontrol component. Recommendations F...