CVE-2011-3211

The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
bcfg2bcfg2
𝑥
≤ 1.1.2
bcfg2bcfg2
0.3.1
bcfg2bcfg2
0.4
bcfg2bcfg2
0.5
bcfg2bcfg2
0.6
bcfg2bcfg2
0.6.1
bcfg2bcfg2
0.6.3
bcfg2bcfg2
0.6.4
bcfg2bcfg2
0.6.5
bcfg2bcfg2
0.6.6
bcfg2bcfg2
0.6.7
bcfg2bcfg2
0.6.8
bcfg2bcfg2
0.6.9
bcfg2bcfg2
0.6.10
bcfg2bcfg2
0.7.0
bcfg2bcfg2
0.7.1
bcfg2bcfg2
0.7.2
bcfg2bcfg2
0.7.3
bcfg2bcfg2
0.7.4
bcfg2bcfg2
0.8.0
bcfg2bcfg2
0.8.1
bcfg2bcfg2
0.8.2
bcfg2bcfg2
0.8.3
bcfg2bcfg2
0.8.4
bcfg2bcfg2
0.8.5
bcfg2bcfg2
0.8.6.1
bcfg2bcfg2
0.8.7
bcfg2bcfg2
0.8.7.1
bcfg2bcfg2
0.8.7.2
bcfg2bcfg2
0.9.0
bcfg2bcfg2
0.9.1d:d
bcfg2bcfg2
0.9.2
bcfg2bcfg2
0.9.3
bcfg2bcfg2
0.9.4
bcfg2bcfg2
0.9.5
bcfg2bcfg2
0.9.5.1
bcfg2bcfg2
0.9.5.2
bcfg2bcfg2
0.9.5.3
bcfg2bcfg2
0.9.5.5
bcfg2bcfg2
0.9.5.7
bcfg2bcfg2
0.9.6
bcfg2bcfg2
1.0:pre1
bcfg2bcfg2
1.0:pre2
bcfg2bcfg2
1.0:pre4
bcfg2bcfg2
1.0.0
bcfg2bcfg2
1.0.1
bcfg2bcfg2
1.1.0
bcfg2bcfg2
1.1.1
bcfg2bcfg2
1.2:prerelease
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bcfg2
natty
Fixed 1.1.1-2ubuntu1.2
released
maverick
Fixed 0.9.6-0ubuntu2.1.10.10.1
released
lucid
Fixed 0.9.6-0ubuntu2.1.10.04.1
released
hardy
Fixed 0.9.5.7-1ubuntu0.1
released
References