CVE-2011-0465 xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| matthias hopf xrdb | <= 1.0.8 | No fix listed |
| matthias hopf xrdb | = 1.0.2 | No fix listed |
| matthias hopf xrdb | = 1.0.3 | No fix listed |
| matthias hopf xrdb | = 1.0.4 | No fix listed |
| matthias hopf xrdb | = 1.0.5 | No fix listed |
| matthias hopf xrdb | = 1.0.6 | No fix listed |
| matthias hopf xrdb | = 1.0.7 | No fix listed |
| x11 | <= r7.6 | No fix listed |
| x11 | = r1 | No fix listed |
| x11 | = r2 | No fix listed |
| x11 | = r3 | No fix listed |
| x11 | = r4 | No fix listed |
| x11 | = r5 | No fix listed |
| x11 | = r6 | No fix listed |
| x11 | = r6.1 | No fix listed |
| x11 | = r6.3 | No fix listed |
| x11 | = r6.4 | No fix listed |
| x11 | = r6.5.1 | No fix listed |
| x11 | = r6.6 | No fix listed |
| x11 | = r6.7 | No fix listed |
| x11 | = r6.7.0 | No fix listed |
| x11 | = r6.8.0 | No fix listed |
| x11 | = r6.8.1 | No fix listed |
| x11 | = r6.8.2 | No fix listed |
| x11 | = r6.9.0 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| x11 | = r7.0 | No fix listed |
| x11 | = r7.1 | No fix listed |
| x11 | = r7.2 | No fix listed |
| x11 | = r7.3 | No fix listed |
| x11 | = r7.4 | No fix listed |
| x11 | = r7.5 | No fix listed |
| debian/x11-xserver-utils(Debian:12) | < 7.6+2 | 7.6+2 |
| debian/x11-xserver-utils(Debian:13) | < 7.6+2 | 7.6+2 |
| debian/x11-xserver-utils(Debian:14) | < 7.6+2 | 7.6+2 |
References
- cgit.freedesktop.org patch
- FEDORA-2011-4871 vendor-advisory
- [xorg-announce] 20110405 xrdb 1.0.9 mailing-list patch
- [xorg-announce] 20110405 X.Org security advisory: root hole via rogue hostname mailing-list patch
- SUSE-SA:2011:016 vendor-advisory
- 44010 third-party-advisory
- 44012 third-party-advisory
- 44040 third-party-advisory vendor-advisory
- 44082 third-party-advisory
- 44122 third-party-advisory
- 44123 third-party-advisory
- 44193 third-party-advisory
- SSA:2011-096-01 vendor-advisory
- DSA-2213 vendor-advisory
- MDVSA-2011:076 vendor-advisory
- RHSA-2011:0432 vendor-advisory
- RHSA-2011:0433 vendor-advisory
- 47189 vdb-entry
- 1025317 vdb-entry
- USN-1107-1 vendor-advisory
- ADV-2011-0880 vdb-entry vendor-advisory
- ADV-2011-0889 vdb-entry
- ADV-2011-0906 vdb-entry
- ADV-2011-0929 vdb-entry
- ADV-2011-0966 vdb-entry
- ADV-2011-0975 vdb-entry
- bugzilla.redhat.com patch
- xorg11-xrdb-command-execution(66585) vdb-entry
- openSUSE-SU-2011:0298 vendor-advisory
- Debian Security Tracker CVE-2011-0465 vendor-advisory
- bugs.debian.org issue-tracking