CVE-2002-1403
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/01/2003
Last modified:
10/10/2017
Description
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.
Impact
Base Score 2.0
7.20
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:phystech:dhcpcd:1.3.17_pl2:*:*:*:*:*:*:* | ||
cpe:2.3:a:phystech:dhcpcd:1.3.22_pl1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000549
- http://marc.info/?l=bugtraq&m=104189546709447&w=2
- http://www.debian.org/security/2002/dsa-219
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003%3A003
- http://www.securityfocus.com/bid/6200
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10663