LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

dhcpcd: arbitrary code execution

Package(s):dhcpcd CVE #(s):CVE-2011-0996
Created:April 18, 2011 Updated:January 9, 2013
Description: From the CVE entry:

dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.

Alerts:
Slackware SSA:2011-210-02 2011-08-01
Pardus 2011-78 2011-05-26
SUSE SUSE-SR:2011:008 2011-05-03
SUSE SUSE-SR:2011:007 2011-04-19
openSUSE openSUSE-SU-2011:0352-1 2011-04-18
openSUSE openSUSE-SU-2011:0342-1 2011-04-18
openSUSE openSUSE-SU-2011:0385-1 2011-04-21
Gentoo 201301-04 2013-01-09
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds