10
CVE-2012-2321
- EPSS 5.71%
- Veröffentlicht 18.05.2012 22:55:06
- Zuletzt bearbeitet 16.06.2026 23:41:21
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginThe loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.71% | 0.92 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
https://bugzilla.novell.com/show_bug.cgi?id=715172
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=26ace5c59f790bce0f1988b88874c6f2c480fd5a
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911
http://www.osvdb.org/81705
http://www.securityfocus.com/bid/53408
https://exchange.xforce.ibmcloud.com/vulnerabilities/75466