Lucene search

MitreCVE-2011-2649

HistoryAug 23, 2011 - 9:55 p.m.

CVE-2011-2649

2011-08-2321:55:01

CWE-20

mitre

web.nvd.nist.gov

cve-2011-2649

kiwi

suse studio

arbitrary command execution

shell metacharacters

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.

Affected configurations

Nvd

Node

marcus_schaferkiwiRange≤3.74.1

novellsuse_studio_onsiteMatch1.1

VendorProductVersionCPE
marcus_schaferkiwi*cpe:2.3:a:marcus_schafer:kiwi:*:*:*:*:*:*:*:*
novellsuse_studio_onsite1.1cpe:2.3:a:novell:suse_studio_onsite:1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
marcus_schafer	kiwi	*	cpe:2.3:a:marcus_schafer:kiwi::::::::
novell	suse_studio_onsite	1.1	cpe:2.3:a:novell:suse_studio_onsite:1.1:::::::*

References

lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

support.novell.com/security/cve/CVE-2011-2649.html

www.securityfocus.com/bid/49236

bugzilla.novell.com/show_bug.cgi?id=701815

exchange.xforce.ibmcloud.com/vulnerabilities/69284

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

Related for CVE-2011-2649