CVE-2011-0997

Priority
Description
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before
3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to
execute arbitrary commands via shell metacharacters in a hostname obtained
from a DHCP message, as demonstrated by a hostname that is provided to
dhclient-script.
Assigned-to
mdeslaur
Notes
mdeslaura couple of fixes post isc release are included in redhat's bug
patches are from Marius Tomaschewski
Package
Source: dhcp3 (LP Ubuntu Debian)
Upstream:released (3.1-ESV-R1)
Package
Upstream:released (4.2.1-P1)
More Information

Updated: 2020-09-10 01:41:27 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)