PT-2011-1051 · Debian · Tex-Common

Mathias Svensson · Published 2011-03-25 · Updated 2018-08-13 · CVE-2011-1400

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions tex-common versions prior to 2.08.1

Description The issue concerns multiple vulnerabilities in the tex-common package of Debian GNU/Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, the default configuration of the shell escape commands directive in certain versions of the tex-common package may allow remote attackers to execute arbitrary code via a crafted TeX document.

Recommendations For versions prior to 2.08.1, update to version 2.08.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the shell escape commands directive to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

BDU:2015-03298

CVE-2011-1400

DSA-2198-1

Affected Products

Tex-Common

References · 17

• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1400 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1400 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1400 · Security Note
• https://bdu.fstec.ru/vul/2015-03298 · Security Note
• http://debian.org/security/2011/dsa-2198 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1400 · Vendor Advisory
• http://secunia.com/advisories/43973 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0731 · Vendor Advisory
• http://secunia.com/advisories/43816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1400 · Security Note
• http://vupen.com/english/advisories/2011/0861 · Vendor Advisory
• http://ubuntu.com/usn/USN-1103-1 · Vendor Advisory
• http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812 · Note
• http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66249 · Note