Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BusyBox udhcpc远程代码执行漏洞
Vulnerability Description
BusyBox是乌克兰软件开发者Denis Vlasenko所负责维护的一套包含了多个linux命令和工具的应用程序。 BusyBox 1.20.0之前版本中的DHCP客户端(udhcpc)没有从DHCP服务器响应中正确转义某些shell元字符,导致存在代码执行漏洞。远程攻击者可通过欺骗DHCP服务器以超级用户权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A