Skip to content
OpenAdvisories
Unscored DSA-2302-1 1 CVE

bcfg2 - arbitrary code execution

Published Sep 7, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 bcfg2 0.9.5.7-1.1+lenny1
Debian · 6.0 bcfg2 1.0.1-3+squeeze1

Vulnerabilities 1

  • Unscored —
    CVE-2011-3211

    The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via sh…