CVE-2011-3178: openbuildservice webui code injection
Published Mar 20, 2018
·Updated
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
Affected Software
1 affected component
openSUSE Open Build Service<2.3.0
Event History
Mar 20, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2011-3178.
2
What is the severity level of CVE-2011-3178?
CVE-2011-3178 has a severity level of high (8.8).
3
What software is affected by this vulnerability?
The openSUSE Open Build Service versions up to and excluding 2.3.0 are affected by this vulnerability.
4
What is the description of CVE-2011-3178?
CVE-2011-3178 is a code injection vulnerability in the web UI of the openSUSE Open Build Service before version 2.3.0, allowing authorized attackers to execute shellcode.
5
How can I fix CVE-2011-3178?
To fix CVE-2011-3178, it is recommended to update to version 2.3.0 of the openSUSE Open Build Service.