9.3

CVE-2011-0465

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

Data is provided by the National Vulnerability Database (NVD)
Matthias Hopf ≫ Xrdb Version <= 1.0.8
Matthias Hopf ≫ Xrdb Version1.0.2
Matthias Hopf ≫ Xrdb Version1.0.3
Matthias Hopf ≫ Xrdb Version1.0.4
Matthias Hopf ≫ Xrdb Version1.0.5
Matthias Hopf ≫ Xrdb Version1.0.6
Matthias Hopf ≫ Xrdb Version1.0.7
X ≫ X11 Version <= r7.6
X ≫ X11 Versionr1
X ≫ X11 Versionr2
X ≫ X11 Versionr3
X ≫ X11 Versionr4
X ≫ X11 Versionr5
X ≫ X11 Versionr6
X ≫ X11 Versionr6.1
X ≫ X11 Versionr6.3
X ≫ X11 Versionr6.4
X ≫ X11 Versionr6.5.1
X ≫ X11 Versionr6.6
X ≫ X11 Versionr6.7
X ≫ X11 Versionr6.7.0
X ≫ X11 Versionr6.8.0
X ≫ X11 Versionr6.8.1
X ≫ X11 Versionr6.8.2
X ≫ X11 Versionr6.9.0
X ≫ X11 Versionr7.0
X ≫ X11 Versionr7.1
X ≫ X11 Versionr7.2
X ≫ X11 Versionr7.3
X ≫ X11 Versionr7.4
X ≫ X11 Versionr7.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 9.9% 0.927
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.