Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1572

Опубликовано: 04 окт. 2011
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitolite:gitolite:*:*:*:*:*:*:*:*
Версия до 1.5.9 (включая)
cpe:2.3:a:gitolite:gitolite:0.50:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.55:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.60:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.65:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.70:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.80:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.85:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.90:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:0.95:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.0:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.1:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.2:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.3:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.4:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.7:*:*:*:*:*:*:*
cpe:2.3:a:gitolite:gitolite:1.5.8:*:*:*:*:*:*:*

EPSS

Процентиль: 69%
0.00592
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu логотип

CVE-2011-1572

ubuntu
около 14 лет назад

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

debian логотип

CVE-2011-1572

debian
около 14 лет назад

Directory traversal vulnerability in the Admin Defined Commands (ADC) ...

github логотип

GHSA-p433-95xh-9wg5

github
больше 3 лет назад

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

EPSS

Процентиль: 69%
0.00592
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22