PT-2012-1147

Name of the Vulnerable Software and Affected Versions ConnMan versions prior to 1.0-r1 ConnMan versions prior to 0.85 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the host name or domain name in a DHCP reply. Multiple vulnerabilities in t...

ConnMan: Multiple vulnerabilities

Background ConnMan provides a daemon for managing Internet connections. Description Multiple vulnerabilities have been found in ConnMan: Errors in inet.c and rtnl.c prevent ConnMan from checking the origin of netlink messages CVE-2012-2320. ConnMan does not properly check for shell escapes when...

PT-2012-1148

Name of the Vulnerable Software and Affected Versions ConnMan versions prior to 1.0 ConnMan versions prior to 0.85 Description The issue is related to an integer overflow in the dhcpv6 get option function, which can cause a denial of service due to an infinite loop and crash. This can be triggere...

PT-2012-1146

Name of the Vulnerable Software and Affected Versions ConnMan versions prior to 1.0 ConnMan versions prior to 0.85 Description The issue allows remote attackers to bypass intended access restrictions. Exploitation of the vulnerabilities may lead to a violation of confidentiality, integrity, and...