CVE-2011-3211

EUVD-2011-3175
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Affected Products (NVD)
VendorProductVersion
bcfg2bcfg2
𝑥
≤ 1.1.2
bcfg2bcfg2
0.3.1
bcfg2bcfg2
0.4
bcfg2bcfg2
0.5
bcfg2bcfg2
0.6
bcfg2bcfg2
0.6.1
bcfg2bcfg2
0.6.3
bcfg2bcfg2
0.6.4
bcfg2bcfg2
0.6.5
bcfg2bcfg2
0.6.6
bcfg2bcfg2
0.6.7
bcfg2bcfg2
0.6.8
bcfg2bcfg2
0.6.9
bcfg2bcfg2
0.6.10
bcfg2bcfg2
0.7.0
bcfg2bcfg2
0.7.1
bcfg2bcfg2
0.7.2
bcfg2bcfg2
0.7.3
bcfg2bcfg2
0.7.4
bcfg2bcfg2
0.8.0
bcfg2bcfg2
0.8.1
bcfg2bcfg2
0.8.2
bcfg2bcfg2
0.8.3
bcfg2bcfg2
0.8.4
bcfg2bcfg2
0.8.5
bcfg2bcfg2
0.8.6.1
bcfg2bcfg2
0.8.7
bcfg2bcfg2
0.8.7.1
bcfg2bcfg2
0.8.7.2
bcfg2bcfg2
0.9.0
bcfg2bcfg2
0.9.1d:d
bcfg2bcfg2
0.9.2
bcfg2bcfg2
0.9.3
bcfg2bcfg2
0.9.4
bcfg2bcfg2
0.9.5
bcfg2bcfg2
0.9.5.1
bcfg2bcfg2
0.9.5.2
bcfg2bcfg2
0.9.5.3
bcfg2bcfg2
0.9.5.5
bcfg2bcfg2
0.9.5.7
bcfg2bcfg2
0.9.6
bcfg2bcfg2
1.0:pre1
bcfg2bcfg2
1.0:pre2
bcfg2bcfg2
1.0:pre4
bcfg2bcfg2
1.0.0
bcfg2bcfg2
1.0.1
bcfg2bcfg2
1.1.0
bcfg2bcfg2
1.1.1
bcfg2bcfg2
1.2:prerelease
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bcfg2
hardy
Fixed 0.9.5.7-1ubuntu0.1
released
lucid
Fixed 0.9.6-0ubuntu2.1.10.04.1
released
maverick
Fixed 0.9.6-0ubuntu2.1.10.10.1
released
natty
Fixed 1.1.1-2ubuntu1.2
released
References