CVE

Id
50559  
CVE No.
CVE-2011-2647  
Status
Candidate  
Description
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.  
Phase
Assigned (20110706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
545910 50559 CVE-2011-2647 CONFIRM:http://support.novell.com/security/cve/CVE-2011-2647.html  View
545911 50559 CVE-2011-2647 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=700589  View
545912 50559 CVE-2011-2647 SUSE:SUSE-SU-2011:0917  View
545913 50559 CVE-2011-2647 URL:http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html  View
545914 50559 CVE-2011-2647 BID:49236  View
545915 50559 CVE-2011-2647 URL:http://www.securityfocus.com/bid/49236  View
545916 50559 CVE-2011-2647 XF:kiwi-archive-code-execution(69282)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34521 JVNDB-2011-004763 SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性 クロスサイトスクリプティングの脆弱性 SUSE Studio で使用される Kiwi には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-2652 50559 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004763.html  View