| Package | Affected versions | Patched versions |
|---|---|---|
| network manager vpnc | < 1.2.6 | 1.2.6 |
Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free