Lucene search

[email protected]NVD:CVE-2011-3211

HistorySep 16, 2011 - 12:35 p.m.

CVE-2011-3211

2011-09-1612:35:13

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.012

Percentile

85.5%

JSON

The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.

Affected configurations

Nvd

Node

bcfg2bcfg2Range≤1.1.2

bcfg2bcfg2Match0.3.1

bcfg2bcfg2Match0.4

bcfg2bcfg2Match0.5

bcfg2bcfg2Match0.6

bcfg2bcfg2Match0.6.1

bcfg2bcfg2Match0.6.3

bcfg2bcfg2Match0.6.4

bcfg2bcfg2Match0.6.5

bcfg2bcfg2Match0.6.6

bcfg2bcfg2Match0.6.7

bcfg2bcfg2Match0.6.8

bcfg2bcfg2Match0.6.9

bcfg2bcfg2Match0.6.10

bcfg2bcfg2Match0.7.0

bcfg2bcfg2Match0.7.1

bcfg2bcfg2Match0.7.2

bcfg2bcfg2Match0.7.3

bcfg2bcfg2Match0.7.4

bcfg2bcfg2Match0.8.0

bcfg2bcfg2Match0.8.1

bcfg2bcfg2Match0.8.2

bcfg2bcfg2Match0.8.3

bcfg2bcfg2Match0.8.4

bcfg2bcfg2Match0.8.5

bcfg2bcfg2Match0.8.6.1

bcfg2bcfg2Match0.8.7

bcfg2bcfg2Match0.8.7.1

bcfg2bcfg2Match0.8.7.2

bcfg2bcfg2Match0.9.0

bcfg2bcfg2Match0.9.1d

bcfg2bcfg2Match0.9.2

bcfg2bcfg2Match0.9.3

bcfg2bcfg2Match0.9.4

bcfg2bcfg2Match0.9.5

bcfg2bcfg2Match0.9.5.1

bcfg2bcfg2Match0.9.5.2

bcfg2bcfg2Match0.9.5.3

bcfg2bcfg2Match0.9.5.5

bcfg2bcfg2Match0.9.5.7

bcfg2bcfg2Match0.9.6

bcfg2bcfg2Match1.0pre1

bcfg2bcfg2Match1.0pre2

bcfg2bcfg2Match1.0pre4

bcfg2bcfg2Match1.0.0

bcfg2bcfg2Match1.0.1

bcfg2bcfg2Match1.1.0

bcfg2bcfg2Match1.1.1

bcfg2bcfg2Match1.2prerelease

VendorProductVersionCPE
bcfg2bcfg2*cpe:2.3:a:bcfg2:bcfg2:*:*:*:*:*:*:*:*
bcfg2bcfg20.3.1cpe:2.3:a:bcfg2:bcfg2:0.3.1:*:*:*:*:*:*:*
bcfg2bcfg20.4cpe:2.3:a:bcfg2:bcfg2:0.4:*:*:*:*:*:*:*
bcfg2bcfg20.5cpe:2.3:a:bcfg2:bcfg2:0.5:*:*:*:*:*:*:*
bcfg2bcfg20.6cpe:2.3:a:bcfg2:bcfg2:0.6:*:*:*:*:*:*:*
bcfg2bcfg20.6.1cpe:2.3:a:bcfg2:bcfg2:0.6.1:*:*:*:*:*:*:*
bcfg2bcfg20.6.3cpe:2.3:a:bcfg2:bcfg2:0.6.3:*:*:*:*:*:*:*
bcfg2bcfg20.6.4cpe:2.3:a:bcfg2:bcfg2:0.6.4:*:*:*:*:*:*:*
bcfg2bcfg20.6.5cpe:2.3:a:bcfg2:bcfg2:0.6.5:*:*:*:*:*:*:*
bcfg2bcfg20.6.6cpe:2.3:a:bcfg2:bcfg2:0.6.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bcfg2	bcfg2	*	cpe:2.3:a:bcfg2:bcfg2::::::::
bcfg2	bcfg2	0.3.1	cpe:2.3:a:bcfg2:bcfg2:0.3.1:::::::*
bcfg2	bcfg2	0.4	cpe:2.3:a:bcfg2:bcfg2:0.4:::::::*
bcfg2	bcfg2	0.5	cpe:2.3:a:bcfg2:bcfg2:0.5:::::::*
bcfg2	bcfg2	0.6	cpe:2.3:a:bcfg2:bcfg2:0.6:::::::*
bcfg2	bcfg2	0.6.1	cpe:2.3:a:bcfg2:bcfg2:0.6.1:::::::*
bcfg2	bcfg2	0.6.3	cpe:2.3:a:bcfg2:bcfg2:0.6.3:::::::*
bcfg2	bcfg2	0.6.4	cpe:2.3:a:bcfg2:bcfg2:0.6.4:::::::*
bcfg2	bcfg2	0.6.5	cpe:2.3:a:bcfg2:bcfg2:0.6.5:::::::*
bcfg2	bcfg2	0.6.6	cpe:2.3:a:bcfg2:bcfg2:0.6.6:::::::*