CVE-2011-4107: debian debian_linux

EPSS trend

Probability

12.68%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

+0.01 pp

From 12.67% on 21-09-2026

21-09-202621-10-2026

EPSS score

12.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

5 found

referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (wooyun.org)
Maturity: unknown

Show all 5 exploits

referenceUnverified
Exploit Reference (packetstormsecurity.org)
Maturity: unknown
exploit-databasephpUnverified
phpMyAdmin 3.3.x/3.4.x - Local File Inclusion via XML External Entity Injection (Metasploit)
Maturity: poc

References

18 links

exchange.xforce.ibmcloud.com/vulnerabilities/71108VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/46447Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
osvdb.org/76798VDB EntryX Refsource OSVDBBroken Link
lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2011/11/03/5Mailing ListX Refsource MLIST
seclists.org/fulldisclosure/2011/Nov/21Mailing ListX Refsource FULLDISCExploitThird Party Advisory
www.phpmyadmin.net/home_page/security/PMASA-2011-17.phpX Refsource CONFIRMPatchVendor Advisory
www.debian.org/security/2012/dsa-2391Vendor AdvisoryX Refsource DEBIANMailing List
lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.securityfocus.com/bid/50497VDB EntryX Refsource BIDBroken LinkThird Party Advisory

Show all 18 references

www.mandriva.com/security/advisories?name=MDVSA-2011:198Vendor AdvisoryX Refsource MANDRIVABroken Link
bugzilla.redhat.com/show_bug.cgi?id=751112X Refsource MISCExploitIssue Tracking
securityreason.com/securityalert/8533Third Party AdvisoryX Refsource SREASONBroken Link
www.openwall.com/lists/oss-security/2011/11/03/3Mailing ListX Refsource MLIST
www.wooyun.org/bugs/wooyun-2010-03185X Refsource MISCBroken LinkExploit
packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txtX Refsource MISCBroken LinkExploit
lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
security-tracker.debian.org/tracker/CVE-2011-4107Advisory

Related vulnerabilities

CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-19970debianphpmyadmin+32.24%7y ago11-12-2018 17:00In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.CVE-2018-19968debianphpmyadmin+32.89%7y ago11-12-2018 17:00An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has access. An attacker must have valid credentials to log in to phpMyAdmin; this vulnerability does not allow an attacker to circumvent the login system.CVE-2018-19969debianphpmyadmin+21.06%7y ago11-12-2018 17:00phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. By deceiving a user into clicking on a crafted URL, it is possible to perform harmful SQL operations such as renaming databases, creating new tables/routines, deleting designer pages, adding/deleting users, updating user passwords, killing SQL processes, etc.CVE-2018-19200debianuriparser+32.48%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-7262fedoraprojectfedora+282.87%8y ago19-03-2018 21:00In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.

All vulnerabilities indebian_linux fedora phpmyadmin

CVE-2011-4107: debian debian_linux

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References