Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2013-1813

Disclosure Date: November 23, 2013 (last updated October 05, 2023)
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
0
0
Attacker Value
Unknown

CVE-2011-2716

Disclosure Date: July 03, 2012 (last updated October 04, 2023)
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
0
0
Attacker Value
Unknown

CVE-2006-5050

Disclosure Date: September 27, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
0
0