Published: 16/09/2011 Updated: 23/09/2011

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The server in Bcfg2 1.1.2 and previous versions, and 1.2 prerelease, allows remote malicious users to execute arbitrary commands via shell metacharacters in data received from a client.

Vulnerable Product	Search on Vulmon	Subscribe to Product
bcfg2 bcfg2 0.5
bcfg2 bcfg2 0.6
bcfg2 bcfg2 0.6.9
bcfg2 bcfg2 0.6.10
bcfg2 bcfg2 0.8.1
bcfg2 bcfg2 0.8.2
bcfg2 bcfg2 0.8.7.2
bcfg2 bcfg2 0.9.0
bcfg2 bcfg2 0.9.5.3
bcfg2 bcfg2 0.9.5.5
bcfg2 bcfg2 1.0.1
bcfg2 bcfg2 1.1.0
bcfg2 bcfg2
bcfg2 bcfg2 0.6.4
bcfg2 bcfg2 0.6.5
bcfg2 bcfg2 0.6.6
bcfg2 bcfg2 0.7.2
bcfg2 bcfg2 0.7.3
bcfg2 bcfg2 0.8.5
bcfg2 bcfg2 0.8.6.1
bcfg2 bcfg2 0.9.4
bcfg2 bcfg2 0.9.5
bcfg2 bcfg2 1.0
bcfg2 bcfg2 0.3.1
bcfg2 bcfg2 0.4
bcfg2 bcfg2 0.6.7
bcfg2 bcfg2 0.6.8
bcfg2 bcfg2 0.7.4
bcfg2 bcfg2 0.8.0
bcfg2 bcfg2 0.8.7
bcfg2 bcfg2 0.8.7.1
bcfg2 bcfg2 0.9.5.1
bcfg2 bcfg2 0.9.5.2
bcfg2 bcfg2 1.0.0
bcfg2 bcfg2 0.6.1
bcfg2 bcfg2 0.6.3
bcfg2 bcfg2 0.7.0
bcfg2 bcfg2 0.7.1
bcfg2 bcfg2 0.8.3
bcfg2 bcfg2 0.8.4
bcfg2 bcfg2 0.9.1d
bcfg2 bcfg2 0.9.2
bcfg2 bcfg2 0.9.3
bcfg2 bcfg2 0.9.5.7
bcfg2 bcfg2 0.9.6
bcfg2 bcfg2 1.1.1
bcfg2 bcfg2 1.2

It has been discovered that the Bcfg2 server, a configuration management server for Bcfg2 clients, is not properly sanitizing input from Bcfg2 clients before passing it to various shell commands This enables an attacker in control of a Bcfg2 client to execute arbitrary commands on the server with root privileges For the oldstable distribution (le ...

CWE-20 https://github.com/solj/bcfg2/commit/46795ae451ca6ede55a0edeb726978aef4684b53 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640028 http://openwall.com/lists/oss-security/2011/09/06/1 http://www.debian.org/security/2011/dsa-2302 http://openwall.com/lists/oss-security/2011/09/01/1 http://secunia.com/advisories/45807 https://github.com/solj/bcfg2/commit/f4a35efec1b6a1e54d61cf1b8bfc83dd1d89eef7 https://bugzilla.redhat.com/show_bug.cgi?id=736279 http://www.securityfocus.com/bid/49414 http://article.gmane.org/gmane.comp.sysutils.bcfg2.devel/4318 http://secunia.com/advisories/45926 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066071.html http://secunia.com/advisories/46042 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066070.html https://nvd.nist.gov https://www.debian.org/security/./dsa-2302

CVE-2011-3211

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect