CVE-2012-2321: Input Validation
Published May 18, 2012
·Updated
The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.
Affected Software
84 affected components
ConnMan ConnMan<=0.84
ConnMan ConnMan=0.1
ConnMan ConnMan=0.2
ConnMan ConnMan=0.3
ConnMan ConnMan=0.4
ConnMan ConnMan=0.5
ConnMan ConnMan=0.6
ConnMan ConnMan=0.7
ConnMan ConnMan=0.8
ConnMan ConnMan=0.9
ConnMan ConnMan=0.10
ConnMan ConnMan=0.11
ConnMan ConnMan=0.12
ConnMan ConnMan=0.13
ConnMan ConnMan=0.14
ConnMan ConnMan=0.15
ConnMan ConnMan=0.16
ConnMan ConnMan=0.17
ConnMan ConnMan=0.18
ConnMan ConnMan=0.19
ConnMan ConnMan=0.20
ConnMan ConnMan=0.21
ConnMan ConnMan=0.22
ConnMan ConnMan=0.23
ConnMan ConnMan=0.24
ConnMan ConnMan=0.25
ConnMan ConnMan=0.26
ConnMan ConnMan=0.27
ConnMan ConnMan=0.28
ConnMan ConnMan=0.29
ConnMan ConnMan=0.30
ConnMan ConnMan=0.31
ConnMan ConnMan=0.32
ConnMan ConnMan=0.33
ConnMan ConnMan=0.34
ConnMan ConnMan=0.35
ConnMan ConnMan=0.36
ConnMan ConnMan=0.37
ConnMan ConnMan=0.38
ConnMan ConnMan=0.39
ConnMan ConnMan=0.40
ConnMan ConnMan=0.41
ConnMan ConnMan=0.42
ConnMan ConnMan=0.43
ConnMan ConnMan=0.44
ConnMan ConnMan=0.45
ConnMan ConnMan=0.46
ConnMan ConnMan=0.47
ConnMan ConnMan=0.48
ConnMan ConnMan=0.49
ConnMan ConnMan=0.50
ConnMan ConnMan=0.51
ConnMan ConnMan=0.52
ConnMan ConnMan=0.53
ConnMan ConnMan=0.54
ConnMan ConnMan=0.55
ConnMan ConnMan=0.56
ConnMan ConnMan=0.57
ConnMan ConnMan=0.58
ConnMan ConnMan=0.59
ConnMan ConnMan=0.60
ConnMan ConnMan=0.61
ConnMan ConnMan=0.62
ConnMan ConnMan=0.63
ConnMan ConnMan=0.64
ConnMan ConnMan=0.65
ConnMan ConnMan=0.66
ConnMan ConnMan=0.67
ConnMan ConnMan=0.68
ConnMan ConnMan=0.69
ConnMan ConnMan=0.70
ConnMan ConnMan=0.71
ConnMan ConnMan=0.72
ConnMan ConnMan=0.73
ConnMan ConnMan=0.74
ConnMan ConnMan=0.75
ConnMan ConnMan=0.76
ConnMan ConnMan=0.77
ConnMan ConnMan=0.78
ConnMan ConnMan=0.79
ConnMan ConnMan=0.80
ConnMan ConnMan=0.81
ConnMan ConnMan=0.82
ConnMan ConnMan=0.83
Event History
May 18, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2321?
CVE-2012-2321 has a medium severity level, allowing remote attackers to execute arbitrary commands.
2
How do I fix CVE-2012-2321?
To fix CVE-2012-2321, update ConnMan to version 0.85 or later.
3
Which versions of ConnMan are affected by CVE-2012-2321?
ConnMan versions prior to 0.85, including all versions from 0.1 to 0.84, are affected by CVE-2012-2321.
4
What kind of attacks can exploit CVE-2012-2321?
CVE-2012-2321 can be exploited using shell metacharacters in DHCP replies to execute arbitrary commands on the system.
5
Is CVE-2012-2321 easy to exploit?
Yes, CVE-2012-2321 is considered to be relatively easy to exploit given its reliance on DHCP interactions.