PT-2011-1213 · Suse · Opensuse+1

Matthias Weckbecker · Published 2011-03-14 · Updated 2017-08-25 · CVE-2011-0469

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:C/A:P

Name of the Vulnerable Software and Affected Versions openSUSE versions prior to March 11, 2011 open build service version 2.1

Description The issue is related to incorrect code generation management in openSUSE, allowing a remote attacker to inject arbitrary code when running some source services.

Recommendations For openSUSE versions prior to March 11, 2011, update to a version released after March 11, 2011. For open build service version 2.1, consider disabling the affected services until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2017-02031

CVE-2011-0469

Affected Products

Open Build Service

Opensuse

References · 5

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=679325 · Exploit
• https://bdu.fstec.ru/vul/2017-02031 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0469 · Security Note
• https://github.com/openSUSE/open-build-service/commit/23c8d21c75242999e29379e6ca8418a14c8725c6 · Note
• https://github.com/openSUSE/open-build-service/commit/76b0ab003f34435ca90d943e02dd22279cdeec2a · Note