CVE-2016-4007
CriticalSummary
Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with 'illegal options.'
Risk Assessment
Attackers may exploit these vulnerabilities to execute unauthorized commands, potentially leading to system compromise and data loss.
Recommendation
It is recommended to update the obs-service-extract_file package to the latest version to mitigate the risks associated with these vulnerabilities.
Original NVD description (English source)
Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."