Vulnerability in Suse Kiwi
CVE-2011-3180
kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to…
EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.
Affected products
- Suse Kiwi
- Suse Studio_extension_for_system_z — versions 1.2
- Suse Studio_onsite — versions 1.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE, Vendor Advisory)