CVE-2011-4192
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD
Description
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."
Affected (3)
Products: Suse: Kiwi, Studio Extension For System Z, Studio Onsite
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 4.85 | |
| Version 1.2 | |
| Version 1.2 |
References (2)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.