CVE-2011-2660

no score yetEPSS 3.2%

The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2011-09-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

suse:linux_enterprise_desktop
suse:vpnc

References

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00029.html
http://www.securityfocus.com/bid/49391
https://bugzilla.novell.com/651577
https://bugzilla.novell.com/708656

Check your stack JSON