Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2011-4182

shell code injection via ESSID because of missing escaping of a variable

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Linux Enterprise sysconfig

  • unspecified to < 0.83.7-2.1affected

References