CVE-2010-3752

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell…

published October 5, 2010

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02465 · 84.3th percentile
Published
2010-10-05T21:00Z
EPSS history
Timeline
  • 05 OCT 21:00Z
    programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell…
    cvelistv5