CVE:CVE-2016-4007
CNNVD:CNNVD-201604-272
Novell openSUSE是美国Novell公司的一套基于Linux的自由操作系统。openSUSE Leap是openSUSE的一个版本。
Novell openSUSE Leap 42.1版本的obs-service-extract_file程序包0.3-5.1之前版本和openSUSE 13.2版本的obs-service-extract_file程序包0.3-3.1之前版本中存在安全漏洞。攻击者可借助服务定义利用该漏洞执行任意命令。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2