362 matches found
CVE-2012-2152
Stack-based buffer overflow in the getpacket method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long packet...
UBUNTU-CVE-2012-2152
Stack-based buffer overflow in the getpacket method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long packet...
CVE-2012-2152
CVE-2012-2152 is a stack-based overflow in the dhcpcd 3.2.3 get_packet() function (socket.c) that can be triggered by a long packet, enabling a remote attacker to crash the service and potentially execute code. Public advisories and OpenVAS entries corroborate the vulnerability in dhcpcd and desc...
CVE-2012-2152
Stack-based buffer overflow in the getpacket method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long packet...
CVE-2012-2152
Stack-based buffer overflow in the getpacket method in socket.c in dhcpcd 3.2.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long packet...
Debian DSA-2498-1 : dhcpcd - remote stack overflow
It was discovered that dhcpcd, a DHCP client, was vulnerable to a stack overflow. A malformed DHCP message could crash the client, causing a denial of service, and potentially remote code execution through properly designed malicous DHCP packets. %NASLMINLEVEL 70300 C Tenable Network Security, In...
[SECURITY] [DSA 2498-1] dhcpcd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2498-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 23, 2012 http://www.debian.org/security/faq -...
DSA-2498-1 dhcpcd - remote stack overflow
Bulletin has no description...
SuSE 10 Security Update : dhcpcd (ZYPP Patch Number 7433)
A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 %NASLMINLEVEL 70300 C...
SuSE 10 Security Update : dhcpcd (ZYPP Patch Number 7453)
A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note: this is a...
[slackware-security] dhcpcd (SSA:2011-210-02)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security dhcpcd SSA:2011-210-02 New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+...
dhcpcd shell characters vulnerability
Shell characters vulnerability in the hostname...
Slackware 13.0 / 13.1 / 13.37 / current : dhcpcd (SSA:2011-210-02)
New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2011-210-02. The text itself is...
[slackware-security] dhcpcd
New dhcpcd packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/dhcpcd-5.2.12-i486-1slack13.37.txz: Upgraded. Sanitize the host name provided by the DHCP server to insure that it does...
openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0342-1)
This update fixes the following security issue : A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by...
SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4389)
A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note this update is...
CVE-2011-0996
dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...
Code injection
dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...