© 2026 vulntracker.io

CVE-2011-1400

N/A

Published: March 25, 2011 at 07:00 PM UTC

Updated: June 16, 2026 at 11:29 PM UTC

3 products affected across 2 vendorsDebian LinuxUbuntu LinuxTex Common

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 4%

Description

The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

Debian Linux · Debiandrupal

95%

All versions

Tex Common · Debian

95%

0.1 0.10 0.11 0.12 0.13 0.14 0.15 0.16 0.17 0.18 0.19 0.2 0.20 0.21 0.22 0.23 0.24 0.25 0.26 0.27 0.28 0.29 0.3 0.30 0.31 0.32 0.33 0.34 0.35 0.36 0.37 0.38 0.39 0.4 0.40 0.41 0.42 0.43 0.44 0.5 0.6 0.7 0.8 0.9 1.0 1.1 1.10 1.11 1.11.1 1.11.2 1.11.3 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.2 1.20 1.3 1.4 1.5 1.6 1.7 1.8 1.9 2.00 2.01 2.02 2.03 2.04 2.05 2.06 2.07 2.08

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (10)

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/43816

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/43973

x_refsource_CONFIRM

Source: [email protected]

http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812

x_refsource_CONFIRM

Source: [email protected]

http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log

Vendor Advisoryx_refsource_DEBIAN

Source: [email protected]

http://www.debian.org/security/2011/dsa-2198

VDB Entryx_refsource_BID

Source: [email protected]

http://www.securityfocus.com/bid/46986

Vendor Advisoryx_refsource_UBUNTU

Source: [email protected]

http://www.ubuntu.com/usn/USN-1103-1

VDB Entryx_refsource_VUPENVendor Advisory

Source: [email protected]

http://www.vupen.com/english/advisories/2011/0731

CVSS

6.8MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-16

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card