Skip to content

CVE-2011-2716 The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_...

MediumCVSS 6.8 EPSS 1.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.

Affected products

ProductAffected versionsFixed in
debian/busybox(Debian:12) < 1:1.20.0-3 1:1.20.0-3
debian/busybox(Debian:13) < 1:1.20.0-3 1:1.20.0-3
debian/busybox(Debian:14) < 1:1.20.0-3 1:1.20.0-3
t-mobile tm-ac1900 = 3.0.0.4.376_3169 No fix listed
busybox <= 1.19.4 No fix listed
busybox = 0.60.5 No fix listed
busybox = 1.00 No fix listed
busybox = 1.0.0-pre1 No fix listed
busybox = 1.0.0-pre10 No fix listed
busybox = 1.0.0-pre2 No fix listed
busybox = 1.0.0-pre3 No fix listed
busybox = 1.0.0-pre4 No fix listed
busybox = 1.0.0-pre5 No fix listed
busybox = 1.0.0-pre6 No fix listed
busybox = 1.0.0-pre7 No fix listed
busybox = 1.0.0-pre8 No fix listed
busybox = 1.0.0-pre9 No fix listed
busybox = 1.0.0-rc1 No fix listed
busybox = 1.0.0-rc2 No fix listed
busybox = 1.0.0-rc3 No fix listed
busybox = 1.01 No fix listed
busybox = 1.1.0 No fix listed
busybox = 1.1.0-pre1 No fix listed
busybox = 1.1.1 No fix listed
busybox = 1.1.2 No fix listed
Show 70 more
ProductAffected versionsFixed in
busybox = 1.1.3 No fix listed
busybox = 1.2.0 No fix listed
busybox = 1.2.1 No fix listed
busybox = 1.2.2 No fix listed
busybox = 1.2.2.1 No fix listed
busybox = 1.3.0 No fix listed
busybox = 1.3.1 No fix listed
busybox = 1.3.2 No fix listed
busybox = 1.4.0 No fix listed
busybox = 1.4.1 No fix listed
busybox = 1.4.2 No fix listed
busybox = 1.5.0 No fix listed
busybox = 1.5.1 No fix listed
busybox = 1.6.0 No fix listed
busybox = 1.6.1 No fix listed
busybox = 1.7.0 No fix listed
busybox = 1.7.1 No fix listed
busybox = 1.7.2 No fix listed
busybox = 1.7.3 No fix listed
busybox = 1.8.0 No fix listed
busybox = 1.8.1 No fix listed
busybox = 1.8.2 No fix listed
busybox = 1.9.0 No fix listed
busybox = 1.9.1 No fix listed
busybox = 1.9.2 No fix listed
busybox = 1.10.0 No fix listed
busybox = 1.10.1 No fix listed
busybox = 1.10.2 No fix listed
busybox = 1.10.3 No fix listed
busybox = 1.10.4 No fix listed
busybox = 1.11.0 No fix listed
busybox = 1.11.1 No fix listed
busybox = 1.11.2 No fix listed
busybox = 1.11.3 No fix listed
busybox = 1.12.0 No fix listed
busybox = 1.12.1 No fix listed
busybox = 1.12.2 No fix listed
busybox = 1.12.3 No fix listed
busybox = 1.12.4 No fix listed
busybox = 1.13.0 No fix listed
busybox = 1.13.1 No fix listed
busybox = 1.13.2 No fix listed
busybox = 1.13.3 No fix listed
busybox = 1.13.4 No fix listed
busybox = 1.14.0 No fix listed
busybox = 1.14.1 No fix listed
busybox = 1.14.2 No fix listed
busybox = 1.14.3 No fix listed
busybox = 1.14.4 No fix listed
busybox = 1.15.0 No fix listed
busybox = 1.15.1 No fix listed
busybox = 1.15.2 No fix listed
busybox = 1.15.3 No fix listed
busybox = 1.16.0 No fix listed
busybox = 1.16.1 No fix listed
busybox = 1.16.2 No fix listed
busybox = 1.17.0 No fix listed
busybox = 1.17.1 No fix listed
busybox = 1.17.2 No fix listed
busybox = 1.17.3 No fix listed
busybox = 1.17.4 No fix listed
busybox = 1.18.0 No fix listed
busybox = 1.18.1 No fix listed
busybox = 1.18.2 No fix listed
busybox = 1.18.3 No fix listed
busybox = 1.18.4 No fix listed
busybox = 1.18.5 No fix listed
busybox = 1.19.0 No fix listed
busybox = 1.19.2 No fix listed
busybox = 1.19.3 No fix listed

References