Novell Home

CVE-2011-2646

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2011-2646 at MITRE

Description

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.

NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entry: 700588

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Studio Onsite 1.1 [Appliance - Studio]
  • kiwi >= 3.74.2-0.81.8
  • kiwi-desc-isoboot >= 3.74.2-0.81.8
  • kiwi-desc-netboot >= 3.74.2-0.81.8
  • kiwi-desc-oemboot >= 3.74.2-0.81.8
  • kiwi-desc-usbboot >= 3.74.2-0.81.8
  • kiwi-desc-vmxboot >= 3.74.2-0.81.8
  • kiwi-desc-xenboot >= 3.74.2-0.81.8
  • kiwi-doc >= 3.74.2-0.81.8
  • kiwi-tools >= 3.74.2-0.81.8
  • susestudio >= 1.1.4-0.19.2
  • susestudio-clicfs >= 1.1.4-0.19.2
  • susestudio-common >= 1.1.4-0.19.2
  • susestudio-image-helpers >= 1.1.4-0.3.2
  • susestudio-kiwi-runner >= 1.1.4-0.19.2
  • susestudio-rmds >= 1.1.4-0.19.2
  • susestudio-testdrive >= 1.1.4-0.19.2
  • susestudio-thoth >= 1.1.4-0.19.2
  • susestudio-ui-server >= 1.1.4-0.19.2
 studioonsite1.1.x86-64
SAT Patch Nr: 4998

© 2013 Novell