Ubuntu.comUB:CVE-2011-1400CVE-2011-1400
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.092 Low
EPSS
Percentile
94.6%
The default configuration of the shell_escape_commands directive in
conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in
Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other
operating systems lists certain programs, which might allow remote
attackers to execute arbitrary code via a crafted TeX document.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | tex-common | < 2.06ubuntu0.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | tex-common | < 2.08ubuntu0.1 | UNKNOWN |
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.092 Low
EPSS
Percentile
94.6%