CVE-2011-0465

Опубликовано: 08 апр. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:matthias_hopf:xrdb:*:*:*:*:*:*:*:*

Версия до 1.0.8 (включая)

cpe:2.3:a:matthias_hopf:xrdb:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:matthias_hopf:xrdb:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:matthias_hopf:xrdb:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:matthias_hopf:xrdb:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:matthias_hopf:xrdb:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:matthias_hopf:xrdb:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:*:*:*:*:*:*:*:*

Версия до r7.6 (включая)

cpe:2.3:a:x:x11:r1:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r2:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r3:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r4:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r5:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.1:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.3:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.4:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.5.1:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.6:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.7:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.7.0:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.8.0:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.8.1:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.8.2:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r6.9.0:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r7.0:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r7.1:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r7.2:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r7.4:*:*:*:*:*:*:*

cpe:2.3:a:x:x11:r7.5:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.09441

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-0465

ubuntu

около 14 лет назад

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

CVE-2011-0465

redhat

около 14 лет назад

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

CVE-2011-0465

debian

около 14 лет назад

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote ...

GHSA-wphx-j4h9-hfr8

github

около 3 лет назад

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

ELSA-2011-0433

oracle-oval

около 14 лет назад

ELSA-2011-0433: xorg-x11-server-utils security update (MODERATE)

EPSS

Процентиль: 92%

0.09441

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-20