NVD

Id
7988  
Name
CVE-2011-0997  
Description
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-04-08  
Modified Date
2016-12-30  
Seq
2011-0997  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45329 7988 CVE-2011-0997 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
45330 7988 CVE-2011-0997 FEDORA-2011-4897  View
45331 7988 CVE-2011-0997 FEDORA-2011-4934  View
45332 7988 CVE-2011-0997 HPSBMU02752  View
45333 7988 CVE-2011-0997 oval:org.mitre.oval:def:12812  View
45334 7988 CVE-2011-0997 GLSA-201301-06  View
45335 7988 CVE-2011-0997 1025300  View
45336 7988 CVE-2011-0997 SSA:2011-097-01  View
45337 7988 CVE-2011-0997 DSA-2216  View
45338 7988 CVE-2011-0997 DSA-2217  View
45339 7988 CVE-2011-0997 VU#107886  View
45340 7988 CVE-2011-0997 MDVSA-2011:073  View
45341 7988 CVE-2011-0997 RHSA-2011:0428  View
45342 7988 CVE-2011-0997 RHSA-2011:0840  View
45343 7988 CVE-2011-0997 47176  View
45344 7988 CVE-2011-0997 USN-1108-1  View
45345 7988 CVE-2011-0997 ADV-2011-0879  View
45346 7988 CVE-2011-0997 ADV-2011-0886  View
45347 7988 CVE-2011-0997 ADV-2011-0909  View
45348 7988 CVE-2011-0997 ADV-2011-0915  View
45349 7988 CVE-2011-0997 ADV-2011-0926  View
45350 7988 CVE-2011-0997 ADV-2011-0965  View
45351 7988 CVE-2011-0997 ADV-2011-1000  View
45352 7988 CVE-2011-0997 iscdhcp-dhclient-command-execution(66580)  View
45353 7988 CVE-2011-0997 https://bugzilla.redhat.com/show_bug.cgi?id=689832  View
45354 7988 CVE-2011-0997 https://www.isc.org/software/dhcp/advisories/cve-2011-0997  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31216 JVNDB-2011-001456 ISC DHCP クライアントに任意のコードを実行される脆弱性 ISC DHCP クライアントには、任意のコードを実行される脆弱性が存在します。 CVE-2011-0997 48904 CVE-2011-0997 7988 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001456.html 2011-04-06 2011-08-11 View
32826 JVNDB-2011-003066 Apple Time Capsule および AirPort Base Station (802.11n) における複数の脆弱性に対するアップデート Apple から Apple Time Capsule および AirPort Base Station (802.11n) のファームウェアアップデートが公開されました。 CVE-2011-0997 48904 CVE-2011-0997 7988 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003066.html 2011-11-11 2011-11-28 View