CVE-2011-4192

Currently unrated

Key Information:

Vendor
Suse
Status
Studio Extension For System Z
Kiwi
Studio Onsite
Vendor
CVE Published:
16 April 2014

Summary

kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."

References

http://lists.opensuse.org/opensuse-security-announce/2011...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.