CVE-2011-2645: High severity kiwi vulnerability
Published Aug 23, 2011
·Updated
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.
Affected Software
2 affected components
Marcus Schafer Kiwi<=3.74.1
Novell Suse Studio Onsite=1.1
Event History
Aug 23, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2645?
CVE-2011-2645 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2011-2645?
To remediate CVE-2011-2645, upgrade Kiwi to version 3.74.2 or higher, or update to Suse Studio version 1.1.4 or later.
3
What software is affected by CVE-2011-2645?
CVE-2011-2645 affects Kiwi versions prior to 3.74.2 and Suse Studio Onsite version 1.1.
4
What type of vulnerability is CVE-2011-2645?
CVE-2011-2645 is a remote code execution vulnerability caused by handling crafted filenames for custom RPMs.
5
Who is affected by CVE-2011-2645?
Organizations using vulnerable versions of Kiwi and Suse Studio are at risk from CVE-2011-2645.