CVE-2012-2321

EUVD-2012-2314
The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
connmanconnman
𝑥
≤ 0.84
connmanconnman
0.1
connmanconnman
0.2
connmanconnman
0.3
connmanconnman
0.4
connmanconnman
0.5
connmanconnman
0.6
connmanconnman
0.7
connmanconnman
0.8
connmanconnman
0.9
connmanconnman
0.10
connmanconnman
0.11
connmanconnman
0.12
connmanconnman
0.13
connmanconnman
0.14
connmanconnman
0.15
connmanconnman
0.16
connmanconnman
0.17
connmanconnman
0.18
connmanconnman
0.19
connmanconnman
0.20
connmanconnman
0.21
connmanconnman
0.22
connmanconnman
0.23
connmanconnman
0.24
connmanconnman
0.25
connmanconnman
0.26
connmanconnman
0.27
connmanconnman
0.28
connmanconnman
0.29
connmanconnman
0.30
connmanconnman
0.31
connmanconnman
0.32
connmanconnman
0.33
connmanconnman
0.34
connmanconnman
0.35
connmanconnman
0.36
connmanconnman
0.37
connmanconnman
0.38
connmanconnman
0.39
connmanconnman
0.40
connmanconnman
0.41
connmanconnman
0.42
connmanconnman
0.43
connmanconnman
0.44
connmanconnman
0.45
connmanconnman
0.46
connmanconnman
0.47
connmanconnman
0.48
connmanconnman
0.49
connmanconnman
0.50
connmanconnman
0.51
connmanconnman
0.52
connmanconnman
0.53
connmanconnman
0.54
connmanconnman
0.55
connmanconnman
0.56
connmanconnman
0.57
connmanconnman
0.58
connmanconnman
0.59
connmanconnman
0.60
connmanconnman
0.61
connmanconnman
0.62
connmanconnman
0.63
connmanconnman
0.64
connmanconnman
0.65
connmanconnman
0.66
connmanconnman
0.67
connmanconnman
0.68
connmanconnman
0.69
connmanconnman
0.70
connmanconnman
0.71
connmanconnman
0.72
connmanconnman
0.73
connmanconnman
0.74
connmanconnman
0.75
connmanconnman
0.76
connmanconnman
0.77
connmanconnman
0.78
connmanconnman
0.79
connmanconnman
0.80
connmanconnman
0.81
connmanconnman
0.82
connmanconnman
0.83
connmanconnman
𝑥
≤ 0.84
connmanconnman
0.1
connmanconnman
0.2
connmanconnman
0.3
connmanconnman
0.4
connmanconnman
0.5
connmanconnman
0.6
connmanconnman
0.7
connmanconnman
0.8
connmanconnman
0.9
connmanconnman
0.10
connmanconnman
0.11
connmanconnman
0.12
connmanconnman
0.13
connmanconnman
0.14
connmanconnman
0.15
connmanconnman
0.16
connmanconnman
0.17
connmanconnman
0.18
connmanconnman
0.19
connmanconnman
0.20
connmanconnman
0.21
connmanconnman
0.22
connmanconnman
0.23
connmanconnman
0.24
connmanconnman
0.25
connmanconnman
0.26
connmanconnman
0.27
connmanconnman
0.28
connmanconnman
0.29
connmanconnman
0.30
connmanconnman
0.31
connmanconnman
0.32
connmanconnman
0.33
connmanconnman
0.34
connmanconnman
0.35
connmanconnman
0.36
connmanconnman
0.37
connmanconnman
0.38
connmanconnman
0.39
connmanconnman
0.40
connmanconnman
0.41
connmanconnman
0.42
connmanconnman
0.43
connmanconnman
0.44
connmanconnman
0.45
connmanconnman
0.46
connmanconnman
0.47
connmanconnman
0.48
connmanconnman
0.49
connmanconnman
0.50
connmanconnman
0.51
connmanconnman
0.52
connmanconnman
0.53
connmanconnman
0.54
connmanconnman
0.55
connmanconnman
0.56
connmanconnman
0.57
connmanconnman
0.58
connmanconnman
0.59
connmanconnman
0.60
connmanconnman
0.61
connmanconnman
0.62
connmanconnman
0.63
connmanconnman
0.64
connmanconnman
0.65
connmanconnman
0.66
connmanconnman
0.67
connmanconnman
0.68
connmanconnman
0.69
connmanconnman
0.70
connmanconnman
0.71
connmanconnman
0.72
connmanconnman
0.73
connmanconnman
0.74
connmanconnman
0.75
connmanconnman
0.76
connmanconnman
0.77
connmanconnman
0.78
connmanconnman
0.79
connmanconnman
0.80
connmanconnman
0.81
connmanconnman
0.82
connmanconnman
0.83
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
connman
bookworm
1.41-3
fixed
bullseye
1.36-2.2+deb11u2
fixed
bullseye (security)
1.36-2.2+deb11u2
fixed
sid
1.43-1
fixed
squeeze
no-dsa
trixie
1.43-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
connman
hardy
dne
lucid
ignored
natty
ignored
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
ignored
zesty
not-affected
Common Weakness Enumeration
References
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=26ace5c59f790bce0f1988b88874c6f2c480fd5a
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81705
http://www.securityfocus.com/bid/53408
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75466
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=26ace5c59f790bce0f1988b88874c6f2c480fd5a
http://git.kernel.org/?p=network/connman/connman.git%3Ba=commit%3Bh=a5f540db7354b76bcabd0a05d8eb8ba2bff4e911
http://secunia.com/advisories/49033
http://secunia.com/advisories/49186
http://security.gentoo.org/glsa/glsa-201205-02.xml
http://www.openwall.com/lists/oss-security/2012/05/07/10
http://www.openwall.com/lists/oss-security/2012/05/07/2
http://www.openwall.com/lists/oss-security/2012/05/07/6
http://www.osvdb.org/81705
http://www.securityfocus.com/bid/53408
https://bugzilla.novell.com/show_bug.cgi?id=715172
https://exchange.xforce.ibmcloud.com/vulnerabilities/75466