CVE-2011-0465— X.Org xrdb主机名称命令注入漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

利用概率较高，应尽快评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

X.Org是X.Org基金会运作的一个对X Window系统的官方参考实现，是开源的自由软件。 X.Org X11R7.6及之前版本的xrdb 1.0.9之前版本中的xrdb.c中存在输入验证漏洞。远程攻击者可以借助从（1）DHCP或者（2）XDMCP消息获取的主机名称中的shell元字符，执行任意命令。

CVE-2011-0465 影响 n/a n/a。利用概率较高，应尽快评估。X.Org是X.Org基金会运作的一个对X Window系统的官方参考实现，是开源的自由软件。 X.Org X11R7.6及之前版本的xrdb 1.0.9之前版本中的xrdb.c中存在输入验证漏洞。远程攻击者可以借助从（1）DHCP或者（2）XDMCP消息获取的主机名称中的shell元字符，执行任意命令。 CVE-2011-0465 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2011-0465

一、 漏洞 CVE-2011-0465 基础信息

受影响产品

二、漏洞 CVE-2011-0465 的公开POC

三、漏洞 CVE-2011-0465 的情报信息

CVE-2011-0465 补丁与修复 (1)

• http://cgit.freedesktop.org/xorg/app/xrdb/commit/?id=1027d5df07398c1507fb1fe3a9981aa6b4bc3a56 x_refsource_CONFIRM

CVE-2011-0465 厂商安全公告 (19)

• https://bugzilla.redhat.com/show_bug.cgi?id=680196 x_refsource_CONFIRM
• http://secunia.com/advisories/44123 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44010 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/47189 vdb-entry x_refsource_BID
• http://secunia.com/advisories/44122 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44193 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44040 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44082 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44012 third-party-advisory x_refsource_SECUNIA
• http://www.securitytracker.com/id?1025317 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2011/dsa-2213 vendor-advisory x_refsource_DEBIAN
• http://www.ubuntu.com/usn/USN-1107-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2011/0975 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0889 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0929 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0906 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0880 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0966 vdb-entry x_refsource_VUPEN
• https://lwn.net/Articles/437150/ vendor-advisory x_refsource_SUSE

CVE-2011-0465 邮件列表归档 (4)

• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057928.html vendor-advisory x_refsource_FEDORA
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00002.html vendor-advisory x_refsource_SUSE
• http://lists.freedesktop.org/archives/xorg-announce/2011-April/001635.html mailing-list x_refsource_MLIST
• http://lists.freedesktop.org/archives/xorg-announce/2011-April/001636.html mailing-list x_refsource_MLIST

CVE-2011-0465 其他参考 (3)

• http://www.redhat.com/support/errata/RHSA-2011-0432.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2011-0433.html vendor-advisory x_refsource_REDHAT
• http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.465748 vendor-advisory x_refsource_SLACKWARE

• https://www.cve.org/CVERecord?id=CVE-2011-0465

同批安全公告 · n/a · 2011-04-08 · 共 10 条

IV. Related Vulnerabilities

V. Comments for CVE-2011-0465