Description
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file.
References
- 4695 vdb-entry
- suse-sysconfig-command-execution(9040) vdb-entry
- SuSE-SA:2002:016 vendor-advisory