CVE-2011-2647: High severity kiwi vulnerability
Published Aug 23, 2011
·Updated
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.
Affected Software
2 affected components
Marcus Schafer Kiwi<=3.74.1
Novell Suse Studio Onsite=1.1
Event History
Aug 23, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2647?
CVE-2011-2647 has a severe impact as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2011-2647?
To fix CVE-2011-2647, upgrade Kiwi to version 3.74.2 or later, and Suse Studio Onsite to version 1.1.4 or later.
3
What software is affected by CVE-2011-2647?
CVE-2011-2647 affects Kiwi versions up to 3.74.1 and Suse Studio Onsite version 1.1.
4
What type of attacks can CVE-2011-2647 facilitate?
CVE-2011-2647 can facilitate remote code execution attacks via crafted archive names.
5
Are there any known exploits for CVE-2011-2647?
There are no specific public exploits disclosed for CVE-2011-2647, but its nature allows potential exploitation.