Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SuSE IfUp-DHCP脚本可远程执行命令漏洞
Vulnerability Description
ifup-dhcp是一款SuSe Linux操作系统下的开放源代码sysconfig包中的一个工具,用于设置网络设备如何从DHCP服务器上获得配置数据。 ifup-dhcp对用户发送给脚本的数据缺少正确充分检查,可导致远程攻击者以ifup-dhcp进程的权限(一般是root)在目标系统上执行任意命令。 远程攻击者可以通过发送包含恶意数据的伪造DHCP应答给ifup-dhcp脚本,可欺骗ifup-dhcp以root权限执行任意命令。 虽然sysconfig在系统中默认安装,但此问题只存在于系统使用DHCP网
CVSS Information
N/A
Vulnerability Type
N/A