CVE-2012-2321

ConnMan < 0.85 - Remote Code Execution via DHCP Reply Host or Domain Name

Title source: llm
STIX 2.1

Description

The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53408
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/81705
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/05/07/6
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201205-02.xml
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/05/07/2
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/05/07/10
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75466
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49033
Issue Tracking x_refsource_misc
https://bugzilla.novell.com/show_bug.cgi?id=715172
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49186

Scores

EPSS 0.0571
EPSS Percentile 92.1%

Details

CWE
CWE-20
Status published
Products (50)
connman/connman 0.1
connman/connman 0.2
connman/connman 0.3
connman/connman 0.4
connman/connman 0.5
connman/connman 0.6
connman/connman 0.7
connman/connman 0.8
connman/connman 0.9
connman/connman 0.10
... and 40 more
Published May 18, 2012
Tracked Since Feb 18, 2026