Skip to content

CVE-2011-4182 shell code injection via ESSID because of missing escaping of a variable

HighCVSS 8.1 EPSS 1.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.

Affected products

ProductAffected versionsFixed in
openSUSE sysconfig <= 0.83.7 No fix listed
SUSE Linux Enterprise sysconfig < 0.83.7-2.1 0.83.7-2.1

References