CVE:CVE-2011-2660
CNNVD:CNNVD-201108-532
SUSE Linux Enterprise Desktop 11 SP1的vpnc包0.5.1-55.10.1之前版本中的modify_resolvconf_suse脚本中存在输入验证漏洞。远程攻击者可借助特制的DNS域名执行任意命令。
solution:Upgrade suse vpnc to a higher version than 0.5.1,and avoid the version (,0.5.1]; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1