CVE-2011-0997

Published: Apr 8, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.

Affected (67)

Products: Isc: Dhcp · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Isc Dhcp	Version 3.0.1
Isc Dhcp	Version 3.0.1 rc10
Isc Dhcp	Version 3.0.1 rc11
Isc Dhcp	Version 3.0.1 rc12
Isc Dhcp	Version 3.0.1 rc13
Isc Dhcp	Version 3.0.1 rc14
Isc Dhcp	Version 3.0.1 rc1
Isc Dhcp	Version 3.0.1 rc2
Isc Dhcp	Version 3.0.1 rc5
Isc Dhcp	Version 3.0.1 rc6
Isc Dhcp	Version 3.0.1 rc7
Isc Dhcp	Version 3.0.1 rc8
Isc Dhcp	Version 3.0.1 rc9
Isc Dhcp	Version 3.0.2
Isc Dhcp	Version 3.0.2 b1
Isc Dhcp	Version 3.0.2 rc1
Isc Dhcp	Version 3.0.2 rc2
Isc Dhcp	Version 3.0.2 rc3
Isc Dhcp	Version 3.0.3
Isc Dhcp	Version 3.0.3 b1
Isc Dhcp	Version 3.0.3 b2
Isc Dhcp	Version 3.0.3 b3
Isc Dhcp	Version 3.0.4
Isc Dhcp	Version 3.0.4 b1
Isc Dhcp	Version 3.0.4 b2
Isc Dhcp	Version 3.0.4 b3
Isc Dhcp	Version 3.0.4 rc1
Isc Dhcp	Version 3.0.5
Isc Dhcp	Version 3.0.5 rc1
Isc Dhcp	Version 3.0.6 rc1
Isc Dhcp	Version 3.0
Isc Dhcp	Version 3.1-esv
Isc Dhcp	Version 3.1.0
Isc Dhcp	Version 3.1.0 a1
Isc Dhcp	Version 3.1.0 a2
Isc Dhcp	Version 3.1.0 a3
Isc Dhcp	Version 3.1.0 b1
Isc Dhcp	Version 3.1.0 b2
Isc Dhcp	Version 3.1.0 rc1
Isc Dhcp	Version 3.1.1 rc1
Isc Dhcp	Version 3.1.1 rc2
Isc Dhcp	Version 3.1.2
Isc Dhcp	Version 3.1.2 b1
Isc Dhcp	Version 3.1.2 rc1
Isc Dhcp	Version 3.1.3
Isc Dhcp	Version 3.1.3 b1
Isc Dhcp	Version 3.1.3 rc1

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Isc Dhcp	Version 4.1-esv
Isc Dhcp	Version 4.1-esv rc1
Isc Dhcp	Version 4.2.0
Isc Dhcp	Version 4.2.0 a1
Isc Dhcp	Version 4.2.0 a2
Isc Dhcp	Version 4.2.0 b1
Isc Dhcp	Version 4.2.0 b2
Isc Dhcp	Version 4.2.0 p1
Isc Dhcp	Version 4.2.0 rc1
Isc Dhcp	Version 4.2.1
Isc Dhcp	Version 4.2.1 b1
Isc Dhcp	Version 4.2.1 rc1

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (70)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=133226187115472&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/44037

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/44048

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/44089

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/44090

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/44103

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/44127

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/44180

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201301-06.xml

Source: cve@mitre.org

Third Party Advisory

http://securitytracker.com/id?1025300

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2011/dsa-2216

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2011/dsa-2217

Source: cve@mitre.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/107886

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2011:073

Source: cve@mitre.org

Third Party Advisory

http://www.osvdb.org/71493

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2011-0428.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-0840.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/47176

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1108-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2011/0879

Source: cve@mitre.org

Permissions Required

http://www.vupen.com/english/advisories/2011/0886

Source: cve@mitre.org

Permissions Required

http://www.vupen.com/english/advisories/2011/0909

Source: cve@mitre.org

Permissions Required

http://www.vupen.com/english/advisories/2011/0915

Source: cve@mitre.org

Permissions Required

http://www.vupen.com/english/advisories/2011/0926

Source: cve@mitre.org

Permissions Required

http://www.vupen.com/english/advisories/2011/0965

Source: cve@mitre.org

Permissions Required

http://www.vupen.com/english/advisories/2011/1000

Source: cve@mitre.org

Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=689832

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/66580

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/37623/

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.isc.org/software/dhcp/advisories/cve-2011-0997

Source: cve@mitre.org

PatchVendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761