Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-0997HistoryApr 08, 2011 - 3:17 p.m.
CVE-2011-0997
2011-04-0815:17:00
Debian Security Bug Tracker
security-tracker.debian.org
14
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.97 High
EPSS
Percentile
99.7%
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | isc-dhcp | < 4.1.1-P1-16.1 | isc-dhcp_4.1.1-P1-16.1_all.deb |
| Debian | 11 | all | isc-dhcp | < 4.1.1-P1-16.1 | isc-dhcp_4.1.1-P1-16.1_all.deb |
| Debian | 10 | all | isc-dhcp | < 4.1.1-P1-16.1 | isc-dhcp_4.1.1-P1-16.1_all.deb |
| Debian | 999 | all | isc-dhcp | < 4.1.1-P1-16.1 | isc-dhcp_4.1.1-P1-16.1_all.deb |
| Debian | 13 | all | isc-dhcp | < 4.1.1-P1-16.1 | isc-dhcp_4.1.1-P1-16.1_all.deb |
Related
openvas
openvas
Slackware Advisory SSA:2011-097-01 dhcp
2012-09-11 00:00:00
CentOS Update for dhclient CESA-2011:0428 centos5 x86_64
2012-07-30 00:00:00
FreeBSD Ports: isc-dhcp31-client
2011-05-12 00:00:00
oraclelinux
oraclelinux
dhcp security update
2011-04-08 00:00:00
nessus
nessus
f5
f5
K13219 : DHCP Client vulnerability CVE-2011-0997
2013-09-05 00:00:00
SOL13219 - DHCP Client vulnerability CVE-2011-0997
2011-11-23 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-12 00:00:00
127 ipTIME router models vulnerable to an unauthenticated RCE by sending a crafted DHCP request
2015-07-14 00:00:00
ISC DHCP dhclient DHCP client shell unfiltered characters vulnerability
2011-11-16 00:00:00
cve
cve
CVE-2011-0997
2011-04-08 15:17:00
exploitdb
exploitdb
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
debian
debian
[SECURITY] [DSA 2217-1] dhcp3 security update
2011-04-10 21:58:40
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-10 21:55:28
ubuntu
ubuntu
DHCP vulnerability
2011-04-19 00:00:00
DHCP vulnerability
2011-04-11 00:00:00
canvas
canvas
Immunity Canvas: CVE_2011_0997
2011-04-08 15:17:00
cisa
cisa
ISC dhclient Vulnerability
2011-04-08 00:00:00
checkpoint_advisories
checkpoint_advisories
redhat
redhat
(RHSA-2011:0840) Important: dhcp security update
2011-05-31 00:00:00
(RHSA-2011:0428) Important: dhcp security update
2011-04-08 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:54:29
slackware
slackware
[slackware-security] dhcp
2011-04-07 05:49:25
centos
centos
dhclient, dhcp, libdhcp4client security update
2011-04-08 21:18:26
packetstorm
packetstorm
ipTIME DHCP Remote Command Execution
2015-07-06 00:00:00
15 TOTOLINK Routers Remote Command Execution
2015-07-16 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: dhcp-4.2.1-4.P1.fc15
2011-04-15 21:50:51
[SECURITY] Fedora 13 Update: dhcp-4.1.2-4.ESV.R2.fc13
2011-04-18 21:21:43
[SECURITY] Fedora 14 Update: dhcp-4.2.0-21.P2.fc14
2011-04-12 21:33:04
prion
prion
Code injection
2011-04-08 15:17:00
exploitpack
exploitpack
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
freebsd
freebsd
isc-dhcp-client -- dhclient does not strip or escape shell meta-characters
2011-04-05 00:00:00
cert
cert
ISC dhclient vulnerability
2011-04-05 00:00:00
ubuntucve
ubuntucve
CVE-2011-0997
2011-04-08 00:00:00
CVE-2011-2716
2012-07-03 00:00:00
threatpost
threatpost
Critical RCE Bug Found Lurking in Avaya VoIP Phones
2019-08-08 20:00:50
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
gentoo
gentoo
ISC DHCP: Denial of service
2013-01-09 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.97 High
EPSS
Percentile
99.7%
Related for DEBIANCVE:CVE-2011-0997