CVE-2011-2717 The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...
CriticalCVSS 9.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux dhcp6c | <= 2011-07-25 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux | = 5.0 | No fix listed |
| dhcpv6 project dhcpv6 | = through 2011-07-25 | No fix listed |
References
- access.redhat.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- vigilance.fr third-party-advisory
- [oss-security] 20110726 Re: CVE request - dhcp clients mailing-list third-party-advisory