CVE-2011-1400 The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and poss...
MediumCVSS 6.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian tex-common | = 0.1 | No fix listed |
| debian tex-common | = 0.2 | No fix listed |
| debian tex-common | = 0.3 | No fix listed |
| debian tex-common | = 0.4 | No fix listed |
| debian tex-common | = 0.5 | No fix listed |
| debian tex-common | = 0.6 | No fix listed |
| debian tex-common | = 0.7 | No fix listed |
| debian tex-common | = 0.8 | No fix listed |
| debian tex-common | = 0.9 | No fix listed |
| debian tex-common | = 0.10 | No fix listed |
| debian tex-common | = 0.11 | No fix listed |
| debian tex-common | = 0.12 | No fix listed |
| debian tex-common | = 0.13 | No fix listed |
| debian tex-common | = 0.14 | No fix listed |
| debian tex-common | = 0.15 | No fix listed |
| debian tex-common | = 0.16 | No fix listed |
| debian tex-common | = 0.17 | No fix listed |
| debian tex-common | = 0.18 | No fix listed |
| debian tex-common | = 0.19 | No fix listed |
| debian tex-common | = 0.20 | No fix listed |
| debian tex-common | = 0.21 | No fix listed |
| debian tex-common | = 0.22 | No fix listed |
| debian tex-common | = 0.23 | No fix listed |
| debian tex-common | = 0.24 | No fix listed |
| debian tex-common | = 0.25 | No fix listed |
Show 58 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian tex-common | = 0.26 | No fix listed |
| debian tex-common | = 0.27 | No fix listed |
| debian tex-common | = 0.28 | No fix listed |
| debian tex-common | = 0.29 | No fix listed |
| debian tex-common | = 0.30 | No fix listed |
| debian tex-common | = 0.31 | No fix listed |
| debian tex-common | = 0.32 | No fix listed |
| debian tex-common | = 0.33 | No fix listed |
| debian tex-common | = 0.34 | No fix listed |
| debian tex-common | = 0.35 | No fix listed |
| debian tex-common | = 0.36 | No fix listed |
| debian tex-common | = 0.37 | No fix listed |
| debian tex-common | = 0.38 | No fix listed |
| debian tex-common | = 0.39 | No fix listed |
| debian tex-common | = 0.40 | No fix listed |
| debian tex-common | = 0.41 | No fix listed |
| debian tex-common | = 0.42 | No fix listed |
| debian tex-common | = 0.43 | No fix listed |
| debian tex-common | = 0.44 | No fix listed |
| debian tex-common | = 1.0 | No fix listed |
| debian tex-common | = 1.1 | No fix listed |
| debian tex-common | = 1.2 | No fix listed |
| debian tex-common | = 1.3 | No fix listed |
| debian tex-common | = 1.4 | No fix listed |
| debian tex-common | = 1.5 | No fix listed |
| debian tex-common | = 1.6 | No fix listed |
| debian tex-common | = 1.7 | No fix listed |
| debian tex-common | = 1.8 | No fix listed |
| debian tex-common | = 1.9 | No fix listed |
| debian tex-common | = 1.10 | No fix listed |
| debian tex-common | = 1.11 | No fix listed |
| debian tex-common | = 1.11.1 | No fix listed |
| debian tex-common | = 1.11.2 | No fix listed |
| debian tex-common | = 1.11.3 | No fix listed |
| debian tex-common | = 1.12 | No fix listed |
| debian tex-common | = 1.13 | No fix listed |
| debian tex-common | = 1.14 | No fix listed |
| debian tex-common | = 1.15 | No fix listed |
| debian tex-common | = 1.16 | No fix listed |
| debian tex-common | = 1.17 | No fix listed |
| debian tex-common | = 1.18 | No fix listed |
| debian tex-common | = 1.19 | No fix listed |
| debian tex-common | = 1.20 | No fix listed |
| debian tex-common | = 2.00 | No fix listed |
| debian tex-common | = 2.01 | No fix listed |
| debian tex-common | = 2.02 | No fix listed |
| debian tex-common | = 2.03 | No fix listed |
| debian tex-common | = 2.04 | No fix listed |
| debian tex-common | = 2.05 | No fix listed |
| debian tex-common | = 2.06 | No fix listed |
| debian tex-common | = 2.07 | No fix listed |
| debian tex-common | = 2.08 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 10.10 | No fix listed |
| debian linux | All versions | No fix listed |
| debian tex-common(Debian:12) | < 2.09 | 2.09 |
| debian tex-common(Debian:13) | < 2.09 | 2.09 |
| debian tex-common(Debian:14) | < 2.09 | 2.09 |
References
- 43816 third-party-advisory vendor-advisory
- 43973 third-party-advisory vendor-advisory
- svn.debian.org
- svn.debian.org
- DSA-2198 vendor-advisory
- 46986 vdb-entry
- USN-1103-1 vendor-advisory
- ADV-2011-0731 vdb-entry vendor-advisory
- ADV-2011-0861 vdb-entry vendor-advisory
- texcommon-shellescapecommands-ce(66249) vdb-entry
- Debian Security Tracker CVE-2011-1400 vendor-advisory