The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.
CPE | Name | Operator | Version |
---|---|---|---|
linux_enterprise_desktop | eq | 11 sp1 | |
vpnc | le | 0.5.1 |