6.8

CVE-2011-1400

The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Tex-common Version 0.1
Debian ≫ Tex-common Version 0.2
Debian ≫ Tex-common Version 0.3
Debian ≫ Tex-common Version 0.4
Debian ≫ Tex-common Version 0.5
Debian ≫ Tex-common Version 0.6
Debian ≫ Tex-common Version 0.7
Debian ≫ Tex-common Version 0.8
Debian ≫ Tex-common Version 0.9
Debian ≫ Tex-common Version 0.10
Debian ≫ Tex-common Version 0.11
Debian ≫ Tex-common Version 0.12
Debian ≫ Tex-common Version 0.13
Debian ≫ Tex-common Version 0.14
Debian ≫ Tex-common Version 0.15
Debian ≫ Tex-common Version 0.16
Debian ≫ Tex-common Version 0.17
Debian ≫ Tex-common Version 0.18
Debian ≫ Tex-common Version 0.19
Debian ≫ Tex-common Version 0.20
Debian ≫ Tex-common Version 0.21
Debian ≫ Tex-common Version 0.22
Debian ≫ Tex-common Version 0.23
Debian ≫ Tex-common Version 0.24
Debian ≫ Tex-common Version 0.25
Debian ≫ Tex-common Version 0.26
Debian ≫ Tex-common Version 0.27
Debian ≫ Tex-common Version 0.28
Debian ≫ Tex-common Version 0.29
Debian ≫ Tex-common Version 0.30
Debian ≫ Tex-common Version 0.31
Debian ≫ Tex-common Version 0.32
Debian ≫ Tex-common Version 0.33
Debian ≫ Tex-common Version 0.34
Debian ≫ Tex-common Version 0.35
Debian ≫ Tex-common Version 0.36
Debian ≫ Tex-common Version 0.37
Debian ≫ Tex-common Version 0.38
Debian ≫ Tex-common Version 0.39
Debian ≫ Tex-common Version 0.40
Debian ≫ Tex-common Version 0.41
Debian ≫ Tex-common Version 0.42
Debian ≫ Tex-common Version 0.43
Debian ≫ Tex-common Version 0.44
Debian ≫ Tex-common Version 1.0
Debian ≫ Tex-common Version 1.1
Debian ≫ Tex-common Version 1.2
Debian ≫ Tex-common Version 1.3
Debian ≫ Tex-common Version 1.4
Debian ≫ Tex-common Version 1.5
Debian ≫ Tex-common Version 1.6
Debian ≫ Tex-common Version 1.7
Debian ≫ Tex-common Version 1.8
Debian ≫ Tex-common Version 1.9
Debian ≫ Tex-common Version 1.10
Debian ≫ Tex-common Version 1.11
Debian ≫ Tex-common Version 1.11.1
Debian ≫ Tex-common Version 1.11.2
Debian ≫ Tex-common Version 1.11.3
Debian ≫ Tex-common Version 1.12
Debian ≫ Tex-common Version 1.13
Debian ≫ Tex-common Version 1.14
Debian ≫ Tex-common Version 1.15
Debian ≫ Tex-common Version 1.16
Debian ≫ Tex-common Version 1.17
Debian ≫ Tex-common Version 1.18
Debian ≫ Tex-common Version 1.19
Debian ≫ Tex-common Version 1.20
Debian ≫ Tex-common Version 2.00
Debian ≫ Tex-common Version 2.01
Debian ≫ Tex-common Version 2.02
Debian ≫ Tex-common Version 2.03
Debian ≫ Tex-common Version 2.04
Debian ≫ Tex-common Version 2.05
Debian ≫ Tex-common Version 2.06
Debian ≫ Tex-common Version 2.07
Debian ≫ Tex-common Version 2.08
Canonical ≫ Ubuntu Linux Version 10.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 10.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.06% 0.893
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/43816
Vendor Advisory
http://secunia.com/advisories/43973
Vendor Advisory
http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812
http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log
http://www.debian.org/security/2011/dsa-2198
http://www.securityfocus.com/bid/46986
http://www.ubuntu.com/usn/USN-1103-1
http://www.vupen.com/english/advisories/2011/0731
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0861
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66249