CVE-2011-4192 kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double qu...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE kiwi | <= 4.85 | No fix listed |
| SUSE studio extension for system z | = 1.2 | No fix listed |
| SUSE studio onsite | = 1.2 | No fix listed |
References
- SUSE-SU-2011:1324 vendor-advisory