{"api_version":"1","generated_at":"2026-07-23T02:17:17+00:00","cve":"CVE-2011-1572","urls":{"html":"https://cve.report/CVE-2011-1572","api":"https://cve.report/api/cve/CVE-2011-1572.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1572","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1572"},"summary":{"title":"CVE-2011-1572","description":"Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.","state":"PUBLISHED","assigner":"redhat","published_at":"2011-10-04 10:55:09","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://seclists.org/oss-sec/2011/q2/209","name":"http://seclists.org/oss-sec/2011/q2/209","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-sec: Re: CVE id request: gitolite","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695568","name":"https://bugzilla.redhat.com/show_bug.cgi?id=695568","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"695568 – (CVE-2011-1572) CVE-2011-1572 gitolite: arbitrary command execution flaw with optional admin-defined command feature","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://groups.google.com/group/gitolite/browse_thread/thread/797a93ec26e1dcbc?pli=1","name":"http://groups.google.com/group/gitolite/browse_thread/thread/797a93ec26e1dcbc?pli=1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Google Groups","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/oss-sec/2011/q2/197","name":"http://seclists.org/oss-sec/2011/q2/197","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-sec: CVE id request: gitolite","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2011/dsa-2215","name":"http://www.debian.org/security/2011/dsa-2215","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2215-1 gitolite","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65542","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65542","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc","name":"https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"security fix for optional ADC (admin-defined command) feature · sitaramc/gitolite@4ce00ae · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/46473","name":"http://www.securityfocus.com/bid/46473","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Gitolite 'ADC' Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1572","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1572","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.55","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.65","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.70","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.80","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.85","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.90","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"0.95","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"1.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1572","vulnerable":"1","versionEndIncluding":"1.5.9","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"gitolite","cpe5":"gitolite","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:28:42.246Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://groups.google.com/group/gitolite/browse_thread/thread/797a93ec26e1dcbc?pli=1"},{"name":"[oss-security] 20110411 Re: CVE id request: gitolite","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://seclists.org/oss-sec/2011/q2/209"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc"},{"name":"DSA-2215","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2011/dsa-2215"},{"name":"[oss-security] 20110409 CVE id request: gitolite","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://seclists.org/oss-sec/2011/q2/197"},{"name":"46473","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/46473"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695568"},{"name":"gitolite-adc-security-bypass(65542)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65542"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-02-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://groups.google.com/group/gitolite/browse_thread/thread/797a93ec26e1dcbc?pli=1"},{"name":"[oss-security] 20110411 Re: CVE id request: gitolite","tags":["mailing-list","x_refsource_MLIST"],"url":"http://seclists.org/oss-sec/2011/q2/209"},{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/sitaramc/gitolite/commit/4ce00aef84d1ff7c35f7adbbb99a6241cfda00cc"},{"name":"DSA-2215","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2011/dsa-2215"},{"name":"[oss-security] 20110409 CVE id request: gitolite","tags":["mailing-list","x_refsource_MLIST"],"url":"http://seclists.org/oss-sec/2011/q2/197"},{"name":"46473","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/46473"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695568"},{"name":"gitolite-adc-security-bypass(65542)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65542"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-1572","datePublished":"2011-10-04T10:00:00.000Z","dateReserved":"2011-04-05T00:00:00.000Z","dateUpdated":"2024-08-06T22:28:42.246Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-10-04 10:55:09","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.9","matchCriteriaId":"9D4F021E-D2F9-4987-A9DA-F652F024F892"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.50:*:*:*:*:*:*:*","matchCriteriaId":"9B00ECB9-B900-4A7D-9E16-F7CC9234D1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.55:*:*:*:*:*:*:*","matchCriteriaId":"03D7FD64-44D8-4649-B234-25570C7002BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C34A62EA-6141-46BC-861C-9B27B73879F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.65:*:*:*:*:*:*:*","matchCriteriaId":"EF3B2609-E301-4F04-A41E-56904F2198B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.70:*:*:*:*:*:*:*","matchCriteriaId":"F932CA6A-B5A8-4127-A05B-0B2451B058B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.80:*:*:*:*:*:*:*","matchCriteriaId":"A7856BE3-0ACB-4110-9588-4D54D6542670"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.85:*:*:*:*:*:*:*","matchCriteriaId":"6335BE0C-58F8-4ACE-BA81-552339A7F085"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.90:*:*:*:*:*:*:*","matchCriteriaId":"6D47DC83-99F9-4BE9-A265-3534D1014B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:0.95:*:*:*:*:*:*:*","matchCriteriaId":"4A719302-490A-4652-A834-E431C7BCCECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A96FBE8E-4A1E-4306-8D2D-9D0C531A8D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C3AEB2CF-276F-4C04-9729-DB9753C8D804"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.1:*:*:*:*:*:*:*","matchCriteriaId":"850F72D5-BF5B-438A-B9AE-E5EFDD4E1631"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.2:*:*:*:*:*:*:*","matchCriteriaId":"5B418106-A153-4561-83A9-3CCA7749F4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6C0E473E-0FFF-4AB7-AE83-1A1D84857127"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.4:*:*:*:*:*:*:*","matchCriteriaId":"794D0551-9624-476D-9C92-241E778AF4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AEE889D6-5C1E-4C3A-85DA-982322D74FBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1A6A0ADB-C8B8-4D1E-8A4C-08CBA6B5E9A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5:*:*:*:*:*:*:*","matchCriteriaId":"91EB741F-94D1-4361-8F4C-B1405A40E35D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1EE930FA-AA3E-461C-8FE1-82F32B65F505"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"53548625-65A5-4A68-B847-0F7595661602"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA62E8B7-039E-486B-B06F-766B0B351A3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F9C6BF86-6B75-4FDA-9B9C-547E90CD87A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C3B7B6C9-ECCD-4023-9BEB-33AE12B02A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"1C6E961E-701E-463D-BBF8-A67EF14229C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A21C5AE6-D644-4F37-BC6C-FA270D29A884"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitolite:gitolite:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"68890C03-F497-4B25-8EB0-6196CB65EA2B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1572","Ordinal":"1","Title":"CVE-2011-1572","CVE":"CVE-2011-1572","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1572","Ordinal":"1","NoteData":"Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.","Type":"Description","Title":"CVE-2011-1572"},{"CveYear":"2011","CveId":"1572","Ordinal":"2","NoteData":"2011-10-04","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"1572","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}