Remote Command Execution Vulnerability in ConnMan by Intel
CVE-2012-2321

Currently unrated

Key Information:

Vendor

Connman

Status
Connman
Vendor
CVE Published:
18 May 2012

What is CVE-2012-2321?

The loopback plug-in in ConnMan before version 0.85 is susceptible to a vulnerability that enables remote attackers to execute arbitrary commands. This can be facilitated through the injection of shell metacharacters into either the host name or domain name fields within a DHCP reply. Consequently, an attacker can exploit this weakness to compromise the integrity of a network.

References

http://www.securityfocus.com/bid/53408
vdb-entryx_refsource_BID
http://git.kernel.org/?p=network/connman/connman.git%3Ba=...
x_refsource_CONFIRM
http://www.osvdb.org/81705
vdb-entryx_refsource_OSVDB

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.