CVE-2011-2660: Suse Linux Enterprise Desktop

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.

Affected products

• Suse Linux Enterprise Desktop: version 11 only
• Suse Vpnc: up to and including 0.5.1

Published 2011-09-06. Last modified 2026-06-16.