CVE-2002-1403

Published: Jan 17, 2003Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.

Affected (2)

Products: Phystech: Dhcpcd

Phystech

1 product

Dhcpcd

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Phystech Dhcpcd	Version 1.3.17_pl2
Phystech Dhcpcd	Version 1.3.22_pl1

References (12)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000549

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104189546709447&w=2

Source: cve@mitre.org

http://www.debian.org/security/2002/dsa-219

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:003

Source: cve@mitre.org

http://www.securityfocus.com/bid/6200

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/10663

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000549