openSUSE Security Update : wpa_supplicant (openSUSE-SU-2014:1313-1)

add 0001-Add-osexec-helper-to-run-external-programs.patch - add 0002-wpacli-Use-osexec-for-action-script-execution.pat ch - fixing CVE-2014-3686 bnc900611 trying to abuse the action scripts in wpacli %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

DEBIAN-CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

USN-2383-1: wpa_supplicant vulnerability

Jouni Malinen discovered that the wpacli tool incorrectly sanitized strings when being used with action scripts. A remote attacker could possibly use this issue to execute arbitrary commands...

USN-2383-1 wpa, wpasupplicant vulnerability

Jouni Malinen discovered that the wpacli tool incorrectly sanitized strings when being used with action scripts. A remote attacker could possibly use this issue to execute arbitrary commands...