oss-security - Re: [klibc] CVE request: klibc: ipconfig sh script with unescaped DHCP options

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 19 May 2011 14:47:15 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: klibc@...or.com, coley <coley@...re.org>
Subject: Re: [klibc] CVE request: klibc: ipconfig sh script
 with unescaped DHCP	options

----- Original Message -----
> Related to CVE-2011-0997
> 
> ipconfig vulnerability for malicious dhcpd if $DNSDOMAIN is later
> used unquoted, than proof of concept involves
> DNSDOMAIN="\\\"\$(echo owned; touch /tmp/owned)"
> 
> fix:
> http://git.kernel.org/?p=libs/klibc/klibc.git;a=commit;h=46a0f831582629612f0ff9707ad1292887f26bff
> will be part of the just to be released klibc-1.5.22
> 

Please use CVE-2011-1930.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.