CVE-2012-2321

The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
connmanconnman
𝑥
≤ 0.84
connmanconnman
0.1
connmanconnman
0.2
connmanconnman
0.3
connmanconnman
0.4
connmanconnman
0.5
connmanconnman
0.6
connmanconnman
0.7
connmanconnman
0.8
connmanconnman
0.9
connmanconnman
0.10
connmanconnman
0.11
connmanconnman
0.12
connmanconnman
0.13
connmanconnman
0.14
connmanconnman
0.15
connmanconnman
0.16
connmanconnman
0.17
connmanconnman
0.18
connmanconnman
0.19
connmanconnman
0.20
connmanconnman
0.21
connmanconnman
0.22
connmanconnman
0.23
connmanconnman
0.24
connmanconnman
0.25
connmanconnman
0.26
connmanconnman
0.27
connmanconnman
0.28
connmanconnman
0.29
connmanconnman
0.30
connmanconnman
0.31
connmanconnman
0.32
connmanconnman
0.33
connmanconnman
0.34
connmanconnman
0.35
connmanconnman
0.36
connmanconnman
0.37
connmanconnman
0.38
connmanconnman
0.39
connmanconnman
0.40
connmanconnman
0.41
connmanconnman
0.42
connmanconnman
0.43
connmanconnman
0.44
connmanconnman
0.45
connmanconnman
0.46
connmanconnman
0.47
connmanconnman
0.48
connmanconnman
0.49
connmanconnman
0.50
connmanconnman
0.51
connmanconnman
0.52
connmanconnman
0.53
connmanconnman
0.54
connmanconnman
0.55
connmanconnman
0.56
connmanconnman
0.57
connmanconnman
0.58
connmanconnman
0.59
connmanconnman
0.60
connmanconnman
0.61
connmanconnman
0.62
connmanconnman
0.63
connmanconnman
0.64
connmanconnman
0.65
connmanconnman
0.66
connmanconnman
0.67
connmanconnman
0.68
connmanconnman
0.69
connmanconnman
0.70
connmanconnman
0.71
connmanconnman
0.72
connmanconnman
0.73
connmanconnman
0.74
connmanconnman
0.75
connmanconnman
0.76
connmanconnman
0.77
connmanconnman
0.78
connmanconnman
0.79
connmanconnman
0.80
connmanconnman
0.81
connmanconnman
0.82
connmanconnman
0.83
connmanconnman
𝑥
≤ 0.84
connmanconnman
0.1
connmanconnman
0.2
connmanconnman
0.3
connmanconnman
0.4
connmanconnman
0.5
connmanconnman
0.6
connmanconnman
0.7
connmanconnman
0.8
connmanconnman
0.9
connmanconnman
0.10
connmanconnman
0.11
connmanconnman
0.12
connmanconnman
0.13
connmanconnman
0.14
connmanconnman
0.15
connmanconnman
0.16
connmanconnman
0.17
connmanconnman
0.18
connmanconnman
0.19
connmanconnman
0.20
connmanconnman
0.21
connmanconnman
0.22
connmanconnman
0.23
connmanconnman
0.24
connmanconnman
0.25
connmanconnman
0.26
connmanconnman
0.27
connmanconnman
0.28
connmanconnman
0.29
connmanconnman
0.30
connmanconnman
0.31
connmanconnman
0.32
connmanconnman
0.33
connmanconnman
0.34
connmanconnman
0.35
connmanconnman
0.36
connmanconnman
0.37
connmanconnman
0.38
connmanconnman
0.39
connmanconnman
0.40
connmanconnman
0.41
connmanconnman
0.42
connmanconnman
0.43
connmanconnman
0.44
connmanconnman
0.45
connmanconnman
0.46
connmanconnman
0.47
connmanconnman
0.48
connmanconnman
0.49
connmanconnman
0.50
connmanconnman
0.51
connmanconnman
0.52
connmanconnman
0.53
connmanconnman
0.54
connmanconnman
0.55
connmanconnman
0.56
connmanconnman
0.57
connmanconnman
0.58
connmanconnman
0.59
connmanconnman
0.60
connmanconnman
0.61
connmanconnman
0.62
connmanconnman
0.63
connmanconnman
0.64
connmanconnman
0.65
connmanconnman
0.66
connmanconnman
0.67
connmanconnman
0.68
connmanconnman
0.69
connmanconnman
0.70
connmanconnman
0.71
connmanconnman
0.72
connmanconnman
0.73
connmanconnman
0.74
connmanconnman
0.75
connmanconnman
0.76
connmanconnman
0.77
connmanconnman
0.78
connmanconnman
0.79
connmanconnman
0.80
connmanconnman
0.81
connmanconnman
0.82
connmanconnman
0.83
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
connman
bullseye (security)
1.36-2.2+deb11u2
fixed
bullseye
1.36-2.2+deb11u2
fixed
squeeze
no-dsa
bookworm
1.41-3
fixed
sid
1.43-1
fixed
trixie
1.43-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
connman
zesty
not-affected
yakkety
ignored
xenial
not-affected
wily
ignored
vivid
ignored
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
ignored
oneiric
ignored
natty
ignored
lucid
ignored
hardy
dne
Common Weakness Enumeration
References
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=26ace5c59f790bce0f1988b88874c6f2c480fd5a
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81705
http://www.securityfocus.com/bid/53408
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75466
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=26ace5c59f790bce0f1988b88874c6f2c480fd5a
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81705
http://www.securityfocus.com/bid/53408
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75466