Novell Home

CVE-2011-2644

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2011-2644 at MITRE

Description

Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.

NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

Novell Bugzilla entry: 700591

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Studio Onsite 1.1 [Appliance - Studio]
  • kiwi >= 3.74.2-0.81.8
  • kiwi-desc-isoboot >= 3.74.2-0.81.8
  • kiwi-desc-netboot >= 3.74.2-0.81.8
  • kiwi-desc-oemboot >= 3.74.2-0.81.8
  • kiwi-desc-usbboot >= 3.74.2-0.81.8
  • kiwi-desc-vmxboot >= 3.74.2-0.81.8
  • kiwi-desc-xenboot >= 3.74.2-0.81.8
  • kiwi-doc >= 3.74.2-0.81.8
  • kiwi-tools >= 3.74.2-0.81.8
  • susestudio >= 1.1.4-0.19.2
  • susestudio-clicfs >= 1.1.4-0.19.2
  • susestudio-common >= 1.1.4-0.19.2
  • susestudio-image-helpers >= 1.1.4-0.3.2
  • susestudio-kiwi-runner >= 1.1.4-0.19.2
  • susestudio-rmds >= 1.1.4-0.19.2
  • susestudio-testdrive >= 1.1.4-0.19.2
  • susestudio-thoth >= 1.1.4-0.19.2
  • susestudio-ui-server >= 1.1.4-0.19.2
 studioonsite1.1.x86-64
SAT Patch Nr: 4998

© 2013 Novell