NVD

Id
19733  
Name
CVE-2016-4007  
Description
Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-11-29  
Seq
2016-4007  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
108094 19733 CVE-2016-4007 openSUSE-SU-2016:0521  View
108095 19733 CVE-2016-4007 openSUSE-SU-2016:1659  View
108096 19733 CVE-2016-4007 openSUSE-SU-2016:1660  View
108097 19733 CVE-2016-4007 SUSE-SU-2016:1839  View
108098 19733 CVE-2016-4007 https://build.opensuse.org/request/show/361096  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1351 JVNDB-2016-002124 openSUSE および Leap の obs-service-extract_file パッケージにおける任意のコマンドを実行される脆弱性 openSUSE および Leap の obs-service-extract_file パッケージには、"不正なオプション" を伴う unzip の実行に関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-4007 90513 CVE-2016-4007 19733 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002124.html 2016-02-20 2016-04-20 View