CVE-2011-2649

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.69%

Published

Aug 23, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.

Weaknesses (CWE)

CWE-20

Affected Products (2)

marcus_schafer · kiwivulnerable

novell · suse_studio_onsitevulnerable

References (10)

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

http://support.novell.com/security/cve/CVE-2011-2649.html

http://www.securityfocus.com/bid/49236

https://bugzilla.novell.com/show_bug.cgi?id=701815

https://exchange.xforce.ibmcloud.com/vulnerabilities/69284

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html

http://support.novell.com/security/cve/CVE-2011-2649.html

http://www.securityfocus.com/bid/49236

https://bugzilla.novell.com/show_bug.cgi?id=701815

https://exchange.xforce.ibmcloud.com/vulnerabilities/69284

KEV Catalog EPSS Scores Vendors All CVEs