Description
Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. Affected releases are sysconfig prior to 0.83.7-2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE Linux Enterprise | sysconfig | unspecified – < 0.83.7-2.1 | 0.83.7-2.1 |