CVE-2011-0997

Опубликовано: 08 апр. 2011

Источник: nvd

CVSS2: 7.5

EPSS Высокий

Описание

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.

Ссылки

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.html
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=133226187115472&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=133226187115472&w=2
Mailing List
Third Party Advisory
http://secunia.com/advisories/44037
Third Party Advisory
http://secunia.com/advisories/44048
Third Party Advisory
http://secunia.com/advisories/44089
Third Party Advisory
http://secunia.com/advisories/44090
Third Party Advisory
http://secunia.com/advisories/44103
Third Party Advisory
http://secunia.com/advisories/44127
Third Party Advisory
http://secunia.com/advisories/44180
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201301-06.xml
Third Party Advisory
http://securitytracker.com/id?1025300
Third Party Advisory
VDB Entry
http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345
Third Party Advisory
http://www.debian.org/security/2011/dsa-2216
Third Party Advisory
http://www.debian.org/security/2011/dsa-2217
Third Party Advisory
http://www.kb.cert.org/vuls/id/107886
Third Party Advisory
US Government Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:073
Third Party Advisory
http://www.osvdb.org/71493
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:isc:dhcp:3.0:*:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc10:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc11:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc12:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc13:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc14:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc5:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc6:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc7:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc8:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.1:rc9:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.2:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.2:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.2:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.2:rc2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.2:rc3:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.3:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.3:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.3:b2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.3:b3:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.4:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.4:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.4:b2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.4:b3:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.4:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.5:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.5:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.0.6:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1-esv:*:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:a1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:a2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:a3:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:b2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.1:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.1:rc2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.2:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.2:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.3:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.3:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:3.1.3:rc1:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:isc:dhcp:4.1-esv:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.1-esv:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:a1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:a2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:b2:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:p1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.0:rc1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.1:-:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.1:b1:*:*:*:*:*:*

cpe:2.3:a:isc:dhcp:4.2.1:rc1:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.71985

Высокий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-0997

ubuntu

около 14 лет назад

CVE-2011-0997

redhat

около 14 лет назад

CVE-2011-0997

debian

около 14 лет назад

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV befo ...

GHSA-hhcj-97jg-v79c

github

около 3 лет назад

ELSA-2011-0428

oracle-oval

около 14 лет назад

ELSA-2011-0428: dhcp security update (IMPORTANT)

EPSS

Процентиль: 99%

0.71985

Высокий

7.5 High

CVSS2

Дефекты

CWE-20