Red Hat Security AdvisoryRHSA-2012:0810
busybox security and bug fix update
Released 2012-06-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) busybox-1:1.15.1-15.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
- Red Hat Enterprise Linux HPC Node (v. 6) busybox-1:1.15.1-15.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
- Red Hat Enterprise Linux Server (v. 6) busybox-1:1.15.1-15.el6
- Red Hat Enterprise Linux Server Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
- Red Hat Enterprise Linux Workstation (v. 6) busybox-1:1.15.1-15.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
Fixes 2 records
Priority MEDIUM 42
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer und…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05817 · Published 2006-08-14 · Fixed
Priority LOW 34
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host nam…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.01779 · Published 2012-07-03 · Fixed CWE-20
