CVE-2011-3211
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute...
CVE-2011-3211 is a high vulnerability (CVSS 9.3) in Bcfg2, published September 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.80%, the 92nd percentile. Fixed in bcfg2 1.0.1-3+squeeze1.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 4.80%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.0.1-3+squeeze1bcfg2 +1 more
Description
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
- Record
CVE-2011-3211- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
- Record
CVE-2011-3211- Updated
- 2026-11-02
EUVDEUVD-2011-3175No score
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
- Record
EUVD-2011-3175- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-83v8-4g3h-mm9pNo score
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute...
The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client.
- Record
GHSA-83v8-4g3h-mm9p- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
github.com/solj/bcfg2/commit/f4a35efec1b6a1e54d61cf1b8bfc83dd1d89eef7
bugzilla.redhat.com/show_bug.cgi?id=736279
securityfocus.com/bid/49414
secunia.com/advisories/46042
debian.org/security/2011/dsa-2302
lists.fedoraproject.org/pipermail/package-announce/2011-September/066070.html
Show 10 moreShow less
bugs.debian.org/cgi-bin/bugreport.cgi?bug=640028
article.gmane.org/gmane.comp.sysutils.bcfg2.devel/4318
openwall.com/lists/oss-security/2011/09/06/1
nvd.nist.gov/vuln/detail/CVE-2011-3211