Unscored severity · published Sep 6, 2011
CVE-2011-2660
The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a…
–
CVSS
3.2%
EPSS
No
On KEV
Description
The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
Linux Enterprise Desktop · Suse
11 · source: NVD
VP
Vpnc · Suse
through 0.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2660
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2660
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00028.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00029.html
www.securityfocus.com
http://www.securityfocus.com/bid/49391
bugzilla.novell.com
https://bugzilla.novell.com/651577
bugzilla.novell.com
https://bugzilla.novell.com/708656
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69514
More from Linux Enterprise Desktop
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5122
Adobe Flash Player Use-After-Free Vulnerability