CVE-2011-2660

Published: Sep 6, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.

Affected (2)

Products: Suse: Linux Enterprise Desktop, Vpnc

Suse

2 products

Linux Enterprise Desktop

Vpnc

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Vpnc	Up to 0.5.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00028.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00029.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/49391

Source: cve@mitre.org

https://bugzilla.novell.com/651577

Source: cve@mitre.org

https://bugzilla.novell.com/708656

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/69514

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00028.html