Red Hat Security AdvisoryRHSA-2012:0308
busybox security and bug fix update
Released 2012-02-21 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) busybox-1:1.2.0-13.el5, busybox-1:1.2.0-13.el5.i386, busybox-1:1.2.0-13.el5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) busybox-1:1.2.0-13.el5, busybox-1:1.2.0-13.el5.i386, busybox-anaconda-1:1.2.0-13.el5 +1
Fixes 2 records
Priority MEDIUM 42
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer und…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05817 · Published 2006-08-14 · Fixed
Priority LOW 34
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host nam…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.01779 · Published 2012-07-03 · Fixed CWE-20
