CVE-2011-0465
CVSS V2 High 9.3
CVSS V3 None
Description
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
Overview
- CVE ID
- CVE-2011-0465
- Assigner
- cve@mitre.org
- Vulnerability Status
- Modified
- Published Version
- 2011-04-08T15:17:25
- Last Modified Date
- 2017-08-17T01:33:31
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:matthias_hopf:xrdb:*:*:*:*:*:*:*:* | 1 | OR | 1.0.8 | |
cpe:2.3:a:matthias_hopf:xrdb:1.0.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:matthias_hopf:xrdb:1.0.3:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:matthias_hopf:xrdb:1.0.4:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:matthias_hopf:xrdb:1.0.5:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:matthias_hopf:xrdb:1.0.6:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:matthias_hopf:xrdb:1.0.7:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:*:*:*:*:*:*:*:* | 1 | OR | r7.6 | |
cpe:2.3:a:x:x11:r1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r3:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r4:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r5:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.3:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.4:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.5.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.6:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.7:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.7.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.8.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.8.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.8.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r6.9.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r7.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r7.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r7.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r7.3:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r7.4:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:x:x11:r7.5:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:M/Au:N/C:C/I:C/A:C
- Access Vector
- NETWORK
- Access Compatibility
- MEDIUM
- Authentication
- NONE
- Confidentiality Impact
- COMPLETE
- Integrity Impact
- COMPLETE
- Availability Impact
- COMPLETE
- Base Score
- 9.3
- Severity
- HIGH
- Exploitability Score
- 8.6
- Impact Score
- 10
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2011-0465 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0465 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-05-10 08:55:25 | Added to TrackCVE |