Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-2716
HistoryJul 03, 2012 - 12:00 a.m.

CVE-2011-2716

2012-07-0300:00:00
ubuntu.com
ubuntu.com
17

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.968

Percentile

99.7%

JSON

The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP
servers to execute arbitrary commands via shell metacharacters in the (1)
HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host
name options.

Bugs

Notes

Author Note
mdeslaur similar to CVE-2011-0997, but for busybox

Related

debiancve 2
prion 2
cvelist 2
nvd 2
cve 2
openvas 46
nessus 47
zdt 1
ubuntu 2
securityvulns 5
slackware 1
checkpoint_advisories 1
centos 2
debian 2
redhat 5
veracode 2
packetstorm 4
oraclelinux 3
exploitdb 1
f5 2
cisa 1
canvas 1
exploitpack 1
freebsd 1
ubuntucve 1
cert 1
fedora 4
amazon 1
threatpost 1
gentoo 2
vmware 2
osv 1
debiancve
debiancve
CVE-2011-2716
2012-07-03 16:40:30
CVE-2011-0997
2011-04-08 15:17:27
prion
prion
Code injection
2012-07-03 16:40:00
Code injection
2011-04-08 15:17:00
cvelist
cvelist
CVE-2011-2716
2012-07-03 16:00:00
CVE-2011-0997
2011-04-08 15:00:00
nvd
nvd
CVE-2011-2716
2012-07-03 16:40:30
CVE-2011-0997
2011-04-08 15:17:27
cve
cve
CVE-2011-2716
2012-07-03 16:40:30
CVE-2011-0997
2011-04-08 15:17:27
openvas
openvas
CentOS Update for dhclient CESA-2011:0428 centos4 x86_64
2012-07-30 00:00:00
Ubuntu: Security Advisory (USN-1108-1)
2011-04-19 00:00:00
Debian Security Advisory DSA 2216-1 (isc-dhcp)
2011-05-12 00:00:00
nessus
nessus
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 9.0 / 9.1 / current : dhcp (SSA:2011-097-01)
2011-05-28 00:00:00
SuSE 10 Security Update : dhcp (ZYPP Patch Number 7451)
2011-12-13 00:00:00
CentOS 4 / 5 : dhcp (CESA-2011:0428)
2011-04-11 00:00:00
zdt
zdt
15 TOTOLINK Router Models - Multiple RCE Vulnerabilities
2015-07-17 00:00:00
ubuntu
ubuntu
DHCP vulnerability
2011-04-11 00:00:00
DHCP vulnerability
2011-04-19 00:00:00
securityvulns
securityvulns
127 ipTIME router models vulnerable to an unauthenticated RCE by sending a crafted DHCP request
2015-07-14 00:00:00
15 TOTOLINK router models vulnerable to multiple RCEs
2015-07-20 00:00:00
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-12 00:00:00
slackware
slackware
[slackware-security] dhcp
2011-04-07 05:49:25
checkpoint_advisories
checkpoint_advisories
ISC DHCP dhclient Network Configuration Script Command Injection (CVE-2011-0997)
2011-08-16 00:00:00
centos
centos
dhclient, dhcp, libdhcp4client security update
2011-04-08 21:18:26
busybox security update
2012-07-10 17:22:13
debian
debian
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-10 21:55:28
[SECURITY] [DSA 2217-1] dhcp3 security update
2011-04-10 21:58:40
redhat
redhat
(RHSA-2011:0840) Important: dhcp security update
2011-05-31 00:00:00
(RHSA-2011:0428) Important: dhcp security update
2011-04-08 00:00:00
(RHSA-2012:0308) Low: busybox security and bug fix update
2012-02-21 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:54:29
Arbitrary Code Execution
2019-05-02 04:41:55
packetstorm
packetstorm
ipTIME DHCP Remote Command Execution
2015-07-06 00:00:00
15 TOTOLINK Routers Remote Command Execution
2015-07-16 00:00:00
ZTE Mobile Hotspot MS910S Backdoor / Hardcoded Password
2020-08-27 00:00:00
oraclelinux
oraclelinux
dhcp security update
2011-04-08 00:00:00
busybox security and bug fix update
2012-03-01 00:00:00
busybox security and bug fix update
2012-06-27 00:00:00
exploitdb
exploitdb
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
f5
f5
K13219 : DHCP Client vulnerability CVE-2011-0997
2013-09-05 00:00:00
SOL13219 - DHCP Client vulnerability CVE-2011-0997
2011-11-23 00:00:00
cisa
cisa
ISC dhclient Vulnerability
2011-04-08 00:00:00
canvas
canvas
Immunity Canvas: CVE_2011_0997
2011-04-08 15:17:00
exploitpack
exploitpack
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
freebsd
freebsd
isc-dhcp-client -- dhclient does not strip or escape shell meta-characters
2011-04-05 00:00:00
ubuntucve
ubuntucve
CVE-2011-0997
2011-04-08 00:00:00
cert
cert
ISC dhclient vulnerability
2011-04-05 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: dhcp-4.2.1-4.P1.fc15
2011-04-15 21:50:51
[SECURITY] Fedora 13 Update: dhcp-4.1.2-4.ESV.R2.fc13
2011-04-18 21:21:43
[SECURITY] Fedora 14 Update: dhcp-4.2.0-21.P2.fc14
2011-04-12 21:33:04
amazon
amazon
Low: busybox
2012-07-05 16:23:00
threatpost
threatpost
Critical RCE Bug Found Lurking in Avaya VoIP Phones
2019-08-08 20:00:50
gentoo
gentoo
BusyBox: Multiple vulnerabilities
2013-12-03 00:00:00
ISC DHCP: Denial of service
2013-01-09 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
osv
osv
dhcp-4.3.3.P1-3.1 on GA media
2024-06-15 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.968

Percentile

99.7%

JSON
Related for UB:CVE-2011-2716
debiancve2prion2cvelist2nvd2cve2openvas46nessus47zdt1ubuntu2securityvulns5slackware1checkpoint_advisories1centos2debian2redhat5veracode2packetstorm4oraclelinux3exploitdb1f52cisa1canvas1exploitpack1freebsd1ubuntucve1cert1fedora4amazon1threatpost1gentoo2vmware2osv1