CVE-2011-0997

Severity CVSS v4.0:
Pending analysis
Type:
CWE-20 Input Validation
Publication date:
08/04/2011
Last modified:
11/04/2025

Description

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:isc:dhcp:3.0:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:-:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc10:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc11:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc12:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc13:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc14:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc2:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc5:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc6:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc7:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc8:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.1:rc9:*:*:*:*:*:*
cpe:2.3:a:isc:dhcp:3.0.2:-:*:*:*:*:*:*


References to Advisories, Solutions, and Tools