CVE-2011-2649 in Kiwi

Riassunto

di MITRE

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 06/07/2011
• Divulgazione: 23/08/2011
• Moderazione: accettato
• Voce: VDB-58353
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01688
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2649
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2649
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2649/