CVE-2011-4192

kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile."

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-04-16

Last modified

2024-08-07

Affected products

• Kiwi (Suse)
• Studio Extension For System Z (Suse)
• Studio Onsite (Suse)

References

• http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html