NVD

Id
8353  
Name
CVE-2011-1412  
Description
sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-03  
Modified Date
2012-03-19  
Seq
2011-1412  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47847 8353 CVE-2011-1412 20110728 Two security issues fixed in ioQuake3 engine  View
47848 8353 CVE-2011-1412 FEDORA-2011-9898  View
47849 8353 CVE-2011-1412 8324  View
47850 8353 CVE-2011-1412 http://svn.icculus.org/quake3?view=rev&revision=2097  View
47851 8353 CVE-2011-1412 http://thilo.tjps.eu/download/patches/ioq3-svn-r2097.diff  View
47852 8353 CVE-2011-1412 http://worldofpadman.com/website/news/en/article/266/wop-1-5-1-1-hotfix-released-for-linux.html  View
47853 8353 CVE-2011-1412 20110728 Two security issues fixed in ioQuake3 engine  View
47854 8353 CVE-2011-1412 48915  View
47855 8353 CVE-2011-1412 ioquake-idtech-command-execution(68869)  View
47856 8353 CVE-2011-1412 https://bugzilla.redhat.com/show_bug.cgi?id=725951  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34139 JVNDB-2011-004381 World of Padman および OpenArena で使用される ioQuake3 エンジンの sys/sys_unix.c における任意のコマンドを実行される脆弱性 World of Padman および OpenArena で使用される ioQuake3 エンジンの sys/sys_unix.c には、任意のコマンドを実行される脆弱性が存在します。 CVE-2011-1412 49319 CVE-2011-1412 8353 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004381.html 2011-08-03 2012-03-27 View