CVE-2011-0997
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 84.3%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 84.29% probability · 100th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- isc/dhcp · debian/debian linux · canonical/ubuntu linux
- Source
- cve@mitre.org
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.htmlMailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=133226187115472&w=2Mailing List, Third Party Advisory
- http://secunia.com/advisories/44037Third Party Advisory
- http://secunia.com/advisories/44048Third Party Advisory
- http://secunia.com/advisories/44089Third Party Advisory
- http://secunia.com/advisories/44090Third Party Advisory
- http://secunia.com/advisories/44103Third Party Advisory
- http://secunia.com/advisories/44127Third Party Advisory
- http://secunia.com/advisories/44180Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201301-06.xmlThird Party Advisory
- http://securitytracker.com/id?1025300Third Party Advisory, VDB Entry
- http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345Third Party Advisory
- http://www.debian.org/security/2011/dsa-2216Third Party Advisory
- http://www.debian.org/security/2011/dsa-2217Third Party Advisory
- http://www.kb.cert.org/vuls/id/107886Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:073Third Party Advisory
- http://www.osvdb.org/71493Broken Link
- http://www.redhat.com/support/errata/RHSA-2011-0428.htmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0840.htmlThird Party Advisory
- http://www.securityfocus.com/bid/47176Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1108-1Third Party Advisory
- http://www.vupen.com/english/advisories/2011/0879Permissions Required
- http://www.vupen.com/english/advisories/2011/0886Permissions Required
- http://www.vupen.com/english/advisories/2011/0909Permissions Required
- http://www.vupen.com/english/advisories/2011/0915Permissions Required
- http://www.vupen.com/english/advisories/2011/0926Permissions Required
- http://www.vupen.com/english/advisories/2011/0965Permissions Required
- http://www.vupen.com/english/advisories/2011/1000Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.