SuSE 10 Security Update : vpnc (ZYPP Patch Number 7692)

This update of vpnc fixes a flaw in the modifyresolvconfsuse script that could potentially allow remote attackers to inject commands through specially crafted DNS domains. CVE-2011-2660 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2011-2660

The modifyresolvconfsuse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name...

SuSE 11.1 Security Update : vpnc (SAT Patch Number 5027)

This update of vpnc fixes a flaw in the modifyresolvconfsuse script that could potentially allow remote attackers to inject commands through specially crafted DNS domains. CVE-2011-2660 Also a rekeying during reconnect was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...