PT-2014-2138

CVE-2011-3180

·

Published

2014-04-16

·

Updated

2014-04-17

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions kiwi versions prior to 4.98.08 SUSE Studio Onsite versions prior to 1.2.1 SUSE Studio Extension for System z versions prior to 1.2.1
Description The issue allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.
Recommendations For kiwi versions prior to 4.98.08, update to version 4.98.08 or later to resolve the issue. For SUSE Studio Onsite versions prior to 1.2.1, update to version 1.2.1 or later. For SUSE Studio Extension for System z versions prior to 1.2.1, update to version 1.2.1 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2011-3180
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com