Computer Security
[EN] securityvulns.ru no-pyccku


ISC DHCP dhclient DHCP client shell unfiltered characters vulnerability
updated since 12.04.2011
Published:16.11.2011
Source:
SecurityVulns ID:11577
Type:client
Threat Level:
7/10
Description:Shell characters vulnerability on server options processing.
Affected:APPLE : Apple Airport
 ISC : dhcp 4.1
 APPLE : Apple Time Capsule
CVE:CVE-2011-0997 (dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.)
Original documentdocumentAPPLE, APPLE-SA-2011-11-10-2 Time Capsule and AirPort Base Station (802.11n) Firmware 7.6 (16.11.2011)
 documentDEBIAN, [SECURITY] [DSA 2216-1] isc-dhcp security update (12.04.2011)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod