NetSight
IP …
critical9.3

CVE-2011-0465

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained …

Impact

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

Affected products

VendorProductAffected versions
Matthias HopfXrdb
through 1.0.8
Versions 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6
XX11
through r7.6
Versions r1, r2, r3, r4, r5

Weakness classification

CWE-20

References