CVE

Id
48908  
CVE No.
CVE-2011-0996  
Status
Candidate  
Description
dhcpcd before 5.2.12 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.  
Phase
Assigned (20110214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
530957 48908 CVE-2011-0996 MLIST:[dhcpcd-discuss] 20110406 [CVE-2011-996] dhcpcd does not strip or escape shell meta characters  View
530958 48908 CVE-2011-0996 URL:http://roy.marples.name/archives/dhcpcd-discuss/2011/0326.html  View
530959 48908 CVE-2011-0996 CONFIRM:http://roy.marples.name/projects/dhcpcd/changeset/c317b39786ac6c3a939dc711db7c78cf099859fd  View
530960 48908 CVE-2011-0996 CONFIRM:http://roy.marples.name/projects/dhcpcd/timeline  View
530961 48908 CVE-2011-0996 CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=675052  View
530962 48908 CVE-2011-0996 GENTOO:GLSA-201301-04  View
530963 48908 CVE-2011-0996 URL:http://security.gentoo.org/glsa/glsa-201301-04.xml  View
530964 48908 CVE-2011-0996 BID:47272  View
530965 48908 CVE-2011-0996 URL:http://www.securityfocus.com/bid/47272  View
530966 48908 CVE-2011-0996 SECUNIA:44070  View
530967 48908 CVE-2011-0996 URL:http://secunia.com/advisories/44070  View
530968 48908 CVE-2011-0996 XF:dhcpcd-response-command-execution(66641)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34048 JVNDB-2011-004290 Android SDK の dexdump におけるサービス運用妨害 (DoS) の脆弱性 Android SDK の dexdump は、構造確認を適切に実行しないため、サービス運用妨害 (dexdump クラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2011-1001 48908 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004290.html  View