CVE-2011-2716

Published Jul 3, 2012

Last updated 4 years ago

Overview

Description
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
Source
secalert@redhat.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
6.8
Impact score
10
Exploitability score
3.2
Vector string
AV:A/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-20

Configurations