PT-2011-1213 · Suse · Opensuse+1

Matthias Weckbecker · Publicado 2011-03-14 · Atualizado 2017-08-25 · CVE-2011-0469

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:C/A:P

Name of the Vulnerable Software and Affected Versions openSUSE versions prior to March 11, 2011 open build service version 2.1

Description The issue is related to incorrect code generation management in openSUSE, allowing a remote attacker to inject arbitrary code when running some source services.

Recommendations For openSUSE versions prior to March 11, 2011, update to a version released after March 11, 2011. For open build service version 2.1, consider disabling the affected services until a patch is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2017-02031

CVE-2011-0469

Produtos afetados

Open Build Service

Opensuse

Referências · 5

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=679325 · Exploit
• https://github.com/openSUSE/open-build-service/commit/23c8d21c75242999e29379e6ca8418a14c8725c6 · Nota
• https://github.com/openSUSE/open-build-service/commit/76b0ab003f34435ca90d943e02dd22279cdeec2a · Nota
• https://bdu.fstec.ru/vul/2017-02031 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-0469 · Nota de Segurança