Kiwi Multiple Remote Code Execution, HTML Injection and Local File Inclusion Vulnerabilities

Bugtraq ID:	49236
Class:	Input Validation Error
CVE:	CVE-2011-2225 CVE-2011-2226 CVE-2011-2644 CVE-2011-2645 CVE-2011-2646 CVE-2011-2647 CVE-2011-2648 CVE-2011-2649 CVE-2011-2650 CVE-2011-2651 CVE-2011-2652
Remote:	Yes
Local:	No
Published:	Aug 18 2011 12:00AM
Updated:	Dec 16 2011 06:48PM
Credit:	Reported in SuSE Linux security advisory.
Vulnerable:	SuSE Studio Standard Edition 1.2 SuSE Studio Onsite 1.1 SuSE Studio Extension for System z 1.2 KIWI Image System KIWI Image System 0
Not Vulnerable:

Kiwi Multiple Remote Code Execution, HTML Injection and Local File Inclusion Vulnerabilities

Kiwi is prone to multiple remote vulnerabilities, including:

1. Multiple HTML Injection issues

2. Multiple remote code-execution vulnerabilities.

3. A local file include vulnerability.

An attacker can exploit these issues to execute arbitrary script code, within the context of the browser, steal cookie-based authentication credentials, and execute arbitrary code within the context of the webserver.

Kiwi Multiple Remote Code Execution, HTML Injection and Local File Inclusion Vulnerabilities

Attackers can use a browser to exploit some of these issue.

Currently we are not aware of any working exploits for the remote code-execution issues. If you feel we are in error or if you are aware of more recent information, please mail us at:[email protected]

Kiwi Multiple Remote Code Execution, HTML Injection and Local File Inclusion Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Kiwi Multiple Remote Code Execution, HTML Injection and Local File Inclusion Vulnerabilities

References:

• Vendor Homepage (Kiwi)