Lucene search
FreeBSD7E69F00D-632A-11E0-9F3A-001D092480A4HistoryApr 05, 2011 - 12:00 a.m.
isc-dhcp-client -- dhclient does not strip or escape shell meta-characters
2011-04-0500:00:00
vuxml.freebsd.org
18
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.971 High
EPSS
Percentile
99.8%
ISC reports:
ISC dhclient did not strip or escape certain shell meta-characters
in responses from the dhcp server (like hostname) before passing the
responses on to dhclient-script. Depending on the script and OS,
this can result in execution of exploit code on the client.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | isc-dhcp31-client | < 3.1.ESV_1,1 | UNKNOWN |
| FreeBSD | any | noarch | isc-dhcp41-client | < 4.1.e,2 | UNKNOWN |
Related
openvas
openvas
Ubuntu Update for dhcp3 USN-1108-2
2011-05-10 00:00:00
Mandriva Update for dhcp MDVSA-2011:073 (dhcp)
2011-04-19 00:00:00
CentOS Update for dhclient CESA-2011:0428 centos4 i386
2011-04-11 00:00:00
checkpoint_advisories
checkpoint_advisories
nessus
nessus
Ubuntu 9.10 / 10.04 LTS / 10.10 : dhcp3 vulnerability (USN-1108-2)
2011-06-13 00:00:00
Mandriva Linux Security Advisory : dhcp (MDVSA-2011:073)
2011-04-12 00:00:00
Scientific Linux Security Update : dhcp on SL4.x,SL5.x,SL6.x i386/x86_64
2012-08-01 00:00:00
redhat
redhat
(RHSA-2011:0840) Important: dhcp security update
2011-05-31 00:00:00
(RHSA-2011:0428) Important: dhcp security update
2011-04-08 00:00:00
securityvulns
securityvulns
15 TOTOLINK router models vulnerable to multiple RCEs
2015-07-20 00:00:00
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-12 00:00:00
ISC DHCP dhclient DHCP client shell unfiltered characters vulnerability
2011-11-16 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:54:29
packetstorm
packetstorm
ipTIME DHCP Remote Command Execution
2015-07-06 00:00:00
15 TOTOLINK Routers Remote Command Execution
2015-07-16 00:00:00
debian
debian
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-10 21:55:28
[SECURITY] [DSA 2217-1] dhcp3 security update
2011-04-10 21:58:40
slackware
slackware
[slackware-security] dhcp
2011-04-07 05:49:25
debiancve
debiancve
CVE-2011-0997
2011-04-08 15:17:00
centos
centos
dhclient, dhcp, libdhcp4client security update
2011-04-08 21:18:26
oraclelinux
oraclelinux
dhcp security update
2011-04-08 00:00:00
f5
f5
K13219 : DHCP Client vulnerability CVE-2011-0997
2013-09-05 00:00:00
SOL13219 - DHCP Client vulnerability CVE-2011-0997
2011-11-23 00:00:00
cve
cve
CVE-2011-0997
2011-04-08 15:17:00
exploitdb
exploitdb
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: dhcp-4.2.1-4.P1.fc15
2011-04-15 21:50:51
[SECURITY] Fedora 14 Update: dhcp-4.2.0-21.P2.fc14
2011-04-12 21:33:04
[SECURITY] Fedora 13 Update: dhcp-4.1.2-4.ESV.R2.fc13
2011-04-18 21:21:43
prion
prion
Code injection
2011-04-08 15:17:00
exploitpack
exploitpack
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
cert
cert
ISC dhclient vulnerability
2011-04-05 00:00:00
ubuntucve
ubuntucve
CVE-2011-0997
2011-04-08 00:00:00
CVE-2011-2716
2012-07-03 00:00:00
canvas
canvas
Immunity Canvas: CVE_2011_0997
2011-04-08 15:17:00
cisa
cisa
ISC dhclient Vulnerability
2011-04-08 00:00:00
ubuntu
ubuntu
DHCP vulnerability
2011-04-11 00:00:00
DHCP vulnerability
2011-04-19 00:00:00
threatpost
threatpost
Critical RCE Bug Found Lurking in Avaya VoIP Phones
2019-08-08 20:00:50
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
gentoo
gentoo
ISC DHCP: Denial of service
2013-01-09 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.971 High
EPSS
Percentile
99.8%
Related for 7E69F00D-632A-11E0-9F3A-001D092480A4