Remote Command Execution Vulnerability in ISC DHCP Client
CVE-2011-0997

Currently unrated

Key Information:

Vendor

Isc
Status
Dhcp
Vendor
CVE Published:
8 April 2011

What is CVE-2011-0997?

The ISC DHCP Client, specifically versions ranging from 3.0.x to 4.2.x before 4.2.1-P1, contains a vulnerability that permits remote attackers to execute arbitrary commands. This can be achieved through the insertion of shell metacharacters within a hostname supplied in a DHCP message to dhclient. By exploiting this flaw, an attacker can manipulate the system to execute unintended commands, potentially leading to unauthorized access or control over the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/47176
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2011/0886
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/44103
third-party-advisoryx_refsource_SECUNIA

EPSS Score

81% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.