NVD

Id
9392  
Name
CVE-2011-2649  
Description
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-23  
Modified Date
2011-08-25  
Seq
2011-2649  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53603 9392 CVE-2011-2649 SUSE-SU-2011:0917  View
53604 9392 CVE-2011-2649 http://support.novell.com/security/cve/CVE-2011-2649.html  View
53605 9392 CVE-2011-2649 49236  View
53606 9392 CVE-2011-2649 kiwi-fileutils-command-execution(69284)  View
53607 9392 CVE-2011-2649 https://bugzilla.novell.com/show_bug.cgi?id=701815  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34518 JVNDB-2011-004760 SUSE Studio で使用される Kiwi における任意のコマンドを実行される脆弱性 SUSE Studio で使用される Kiwi には、任意のコマンドを実行される脆弱性が存在します。 CVE-2011-2649 50556 CVE-2011-2649 9392 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004760.html 2011-08-23 2012-03-27 View