Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1412

Опубликовано: 04 авг. 2011
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ioquake3:ioquake3_engine:*:*:*:*:*:*:*:*
cpe:2.3:a:openarena:openarena:0.8.x-15:*:*:*:*:*:*:*
cpe:2.3:a:openarena:openarena:0.8.x-16:*:*:*:*:*:*:*
cpe:2.3:a:worldofpadman:world_of_padman:1.5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.05632
Низкий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 14 лет назад

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable.

debian
больше 14 лет назад

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in Wo ...

github
больше 3 лет назад

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharacters in a long fs_game variable.

EPSS

Процентиль: 90%
0.05632
Низкий

7.5 High

CVSS2

Дефекты

CWE-20