Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-0997
HistoryApr 08, 2011 - 3:17 p.m.

CVE-2011-0997

2011-04-0815:17:27
CWE-20
[email protected]
web.nvd.nist.gov
55
cve-2011-0997
dhclient
isc dhcp
remote code execution
shell metacharacters
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.

Affected configurations

NVD
Node
iscdhcpMatch3.0
OR
iscdhcpMatch3.0.1-
OR
iscdhcpMatch3.0.1rc1
OR
iscdhcpMatch3.0.1rc10
OR
iscdhcpMatch3.0.1rc11
OR
iscdhcpMatch3.0.1rc12
OR
iscdhcpMatch3.0.1rc13
OR
iscdhcpMatch3.0.1rc14
OR
iscdhcpMatch3.0.1rc2
OR
iscdhcpMatch3.0.1rc5
OR
iscdhcpMatch3.0.1rc6
OR
iscdhcpMatch3.0.1rc7
OR
iscdhcpMatch3.0.1rc8
OR
iscdhcpMatch3.0.1rc9
OR
iscdhcpMatch3.0.2-
OR
iscdhcpMatch3.0.2b1
OR
iscdhcpMatch3.0.2rc1
OR
iscdhcpMatch3.0.2rc2
OR
iscdhcpMatch3.0.2rc3
OR
iscdhcpMatch3.0.3-
OR
iscdhcpMatch3.0.3b1
OR
iscdhcpMatch3.0.3b2
OR
iscdhcpMatch3.0.3b3
OR
iscdhcpMatch3.0.4-
OR
iscdhcpMatch3.0.4b1
OR
iscdhcpMatch3.0.4b2
OR
iscdhcpMatch3.0.4b3
OR
iscdhcpMatch3.0.4rc1
OR
iscdhcpMatch3.0.5-
OR
iscdhcpMatch3.0.5rc1
OR
iscdhcpMatch3.0.6rc1
OR
iscdhcpMatch3.1-esv
OR
iscdhcpMatch3.1.0-
OR
iscdhcpMatch3.1.0a1
OR
iscdhcpMatch3.1.0a2
OR
iscdhcpMatch3.1.0a3
OR
iscdhcpMatch3.1.0b1
OR
iscdhcpMatch3.1.0b2
OR
iscdhcpMatch3.1.0rc1
OR
iscdhcpMatch3.1.1rc1
OR
iscdhcpMatch3.1.1rc2
OR
iscdhcpMatch3.1.2-
OR
iscdhcpMatch3.1.2b1
OR
iscdhcpMatch3.1.2rc1
OR
iscdhcpMatch3.1.3-
OR
iscdhcpMatch3.1.3b1
OR
iscdhcpMatch3.1.3rc1
Node
iscdhcpMatch4.1-esv-
OR
iscdhcpMatch4.1-esvrc1
OR
iscdhcpMatch4.2.0-
OR
iscdhcpMatch4.2.0a1
OR
iscdhcpMatch4.2.0a2
OR
iscdhcpMatch4.2.0b1
OR
iscdhcpMatch4.2.0b2
OR
iscdhcpMatch4.2.0p1
OR
iscdhcpMatch4.2.0rc1
OR
iscdhcpMatch4.2.1-
OR
iscdhcpMatch4.2.1b1
OR
iscdhcpMatch4.2.1rc1
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
OR
debiandebian_linuxMatch7.0
Node
canonicalubuntu_linuxMatch6.06lts
OR
canonicalubuntu_linuxMatch8.04lts
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04lts
OR
canonicalubuntu_linuxMatch10.10

References

Related

nessus 36
exploitdb 1
f5 2
openvas 32
nvd 1
debian 2
oraclelinux 1
securityvulns 5
ubuntu 2
centos 1
slackware 1
checkpoint_advisories 1
redhat 2
veracode 1
packetstorm 2
debiancve 1
exploitpack 1
prion 1
fedora 4
freebsd 1
cert 1
ubuntucve 2
canvas 1
cisa 1
cvelist 1
threatpost 1
vmware 2
gentoo 1
nessus
nessus
Debian DSA-2216-1 : isc-dhcp - missing input sanitization
2011-04-11 00:00:00
FreeBSD : isc-dhcp-client -- dhclient does not strip or escape shell meta-characters (7e69f00d-632a-11e0-9f3a-001d092480a4)
2011-04-11 00:00:00
F5 Networks BIG-IP : DHCP Client vulnerability (SOL13219)
2014-10-10 00:00:00
exploitdb
exploitdb
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
f5
f5
K13219 : DHCP Client vulnerability CVE-2011-0997
2013-09-05 00:00:00
SOL13219 - DHCP Client vulnerability CVE-2011-0997
2011-11-23 00:00:00
openvas
openvas
Slackware Advisory SSA:2011-097-01 dhcp
2012-09-11 00:00:00
FreeBSD Ports: isc-dhcp31-client
2011-05-12 00:00:00
CentOS Update for dhclient CESA-2011:0428 centos5 i386
2011-08-09 00:00:00
nvd
nvd
CVE-2011-0997
2011-04-08 15:17:27
debian
debian
[SECURITY] [DSA 2217-1] dhcp3 security update
2011-04-10 21:58:40
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-10 21:55:28
oraclelinux
oraclelinux
dhcp security update
2011-04-08 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2216-1] isc-dhcp security update
2011-04-12 00:00:00
127 ipTIME router models vulnerable to an unauthenticated RCE by sending a crafted DHCP request
2015-07-14 00:00:00
15 TOTOLINK router models vulnerable to multiple RCEs
2015-07-20 00:00:00
ubuntu
ubuntu
DHCP vulnerability
2011-04-11 00:00:00
DHCP vulnerability
2011-04-19 00:00:00
centos
centos
dhclient, dhcp, libdhcp4client security update
2011-04-08 21:18:26
slackware
slackware
[slackware-security] dhcp
2011-04-07 05:49:25
checkpoint_advisories
checkpoint_advisories
ISC DHCP dhclient Network Configuration Script Command Injection (CVE-2011-0997)
2011-08-16 00:00:00
redhat
redhat
(RHSA-2011:0840) Important: dhcp security update
2011-05-31 00:00:00
(RHSA-2011:0428) Important: dhcp security update
2011-04-08 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:54:29
packetstorm
packetstorm
ipTIME DHCP Remote Command Execution
2015-07-06 00:00:00
15 TOTOLINK Routers Remote Command Execution
2015-07-16 00:00:00
debiancve
debiancve
CVE-2011-0997
2011-04-08 15:17:27
exploitpack
exploitpack
15 TOTOLINK Router Models - Multiple Remote Code Execution Vulnerabilities
2015-07-16 00:00:00
prion
prion
Code injection
2011-04-08 15:17:00
fedora
fedora
[SECURITY] Fedora 15 Update: dhcp-4.2.1-4.P1.fc15
2011-04-15 21:50:51
[SECURITY] Fedora 13 Update: dhcp-4.1.2-4.ESV.R2.fc13
2011-04-18 21:21:43
[SECURITY] Fedora 14 Update: dhcp-4.2.0-21.P2.fc14
2011-04-12 21:33:04
freebsd
freebsd
isc-dhcp-client -- dhclient does not strip or escape shell meta-characters
2011-04-05 00:00:00
cert
cert
ISC dhclient vulnerability
2011-04-05 00:00:00
ubuntucve
ubuntucve
CVE-2011-0997
2011-04-08 00:00:00
CVE-2011-2716
2012-07-03 00:00:00
canvas
canvas
Immunity Canvas: CVE_2011_0997
2011-04-08 15:17:00
cisa
cisa
ISC dhclient Vulnerability
2011-04-08 00:00:00
cvelist
cvelist
CVE-2011-0997
2011-04-08 15:00:00
threatpost
threatpost
Critical RCE Bug Found Lurking in Avaya VoIP Phones
2019-08-08 20:00:50
vmware
vmware
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
VMware ESX third party updates for Service Console packages glibc and dhcp
2011-07-28 00:00:00
gentoo
gentoo
ISC DHCP: Denial of service
2013-01-09 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2011-0997
nessus36exploitdb1f52openvas32nvd1debian2oraclelinux1securityvulns5ubuntu2centos1slackware1checkpoint_advisories1redhat2veracode1packetstorm2debiancve1exploitpack1prion1fedora4freebsd1cert1ubuntucve2canvas1cisa1cvelist1threatpost1vmware2gentoo1