Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root.
CVSS Information
N/A
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Network Manager VPNC插件操作系统命令注入漏洞
Vulnerability Description
Network Manager VPNC plugin（networkmanager-vpnc）是一款支持连接Cisco VPN的虚拟网络管理器。 Network Manager VPNC插件1.2.6之前版本中存在安全漏洞，该漏洞源于换行字符可以被用来将Password helper参数注入到配置数据中并传入到VPNC。攻击者可利用该漏洞以root权限执行命令。
CVSS Information
N/A
Vulnerability Type
N/A