VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 16, 2014· Updated Jun 16, 2026

CVE-2011-3180

CVE-2011-3180

Description

kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • SUSE S.A./Kiwi
    cpe:2.3:a:suse:kiwi:*:*:*:*:*:*:*:*
    Range: <=4.98.07
  • SUSE S.A./Studio Extension For System Z2 versions
    cpe:2.3:a:suse:studio_extension_for_system_z:1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:suse:studio_extension_for_system_z:1.2:*:*:*:*:*:*:*
    • (no CPE)range: <1.2.1
  • SUSE S.A./Studio Onsite2 versions
    cpe:2.3:a:suse:studio_onsite:1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:suse:studio_onsite:1.2:*:*:*:*:*:*:*
    • (no CPE)range: <1.2.1
  • OpenSUSE/kiwillm-fuzzy
    Range: <4.98.08

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.