NVD

Id
10811  
Name
CVE-2011-4349  
Description
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-10  
Modified Date
2011-12-12  
Seq
2011-4349  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60745 10811 CVE-2011-4349 http://gitorious.org/colord/master/commit/1fadd90afcb4bbc47513466ee9bb1e4a8632ac3b  View
60746 10811 CVE-2011-4349 http://gitorious.org/colord/master/commit/36549e0ed255e7dfa7852d08a75dd5f00cbd270e  View
60747 10811 CVE-2011-4349 FEDORA-2011-16453  View
60748 10811 CVE-2011-4349 FEDORA-2011-16451  View
60749 10811 CVE-2011-4349 [oss-security] 20111125 Re: CVE Request: colord sql injections  View
60750 10811 CVE-2011-4349 [oss-security] 20111125 Re: CVE Request: colord sql injections  View
60751 10811 CVE-2011-4349 50814  View
60752 10811 CVE-2011-4349 https://bugs.freedesktop.org/show_bug.cgi?id=42904  View
60753 10811 CVE-2011-4349 https://bugzilla.redhat.com/show_bug.cgi?id=757171  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33097 JVNDB-2011-003337 colord の cd-mapping-db.c および cd-device-db.c における SQL インジェクションの脆弱性 colord の (1) cd-mapping-db.c および (2) cd-device-db.c には、color デバイスおよび (a) device id、(b) property、または (c) profile id に関する処理に不備があるため、SQL インジェクションの脆弱性が存在します。 CVE-2011-4349 52256 CVE-2011-4349 10811 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003337.html 2011-12-10 2011-12-13 View