CVE-2011-2646: High severity kiwi vulnerability
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.
Affected Software
Event History
Frequently Asked Questions
What types of systems are affected by CVE-2011-2646?
CVE-2011-2646 affects Kiwi versions up to 3.74.1 and SUSE Studio Onsite version 1.1.
What is the impact of CVE-2011-2646?
The impact of CVE-2011-2646 is the potential for remote attackers to execute arbitrary code on affected systems.
How can I mitigate CVE-2011-2646?
Mitigation for CVE-2011-2646 involves upgrading Kiwi to version 3.74.2 or later and SUSE Studio to version 1.1.4 or later.
Is there a patch available for CVE-2011-2646?
Yes, a patch is available that resolves CVE-2011-2646 by addressing the vulnerability in the affected software versions.
What specific vulnerability does CVE-2011-2646 address?
CVE-2011-2646 addresses an unspecified vulnerability that allows execution of arbitrary code via crafted filenames in modified files.