CVE-2011-0997— ISC DHCP dhclient响应处理shell元字符代码执行漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

利用概率较高，应尽快评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

ISC DHCP是美国Internet Systems Consortium（ISC）公司的一套开源的动态主机配置协议服务器软件。 ISC DHCP 4.2.1-P1之前的3.0.x至4.2.x版本，3.1-ESV-R1之前的3.1-ESV版本和4.1-ESV-R2之前的4.1-ESV版本的dhclient中存在输入验证漏洞。ISC dhclient将响应传输给dhclient-script之前没有去除或转义某些dhcp服务器返回的shell元字符，远程攻击者可利用此漏洞在客户端上执行任意代码。

CVE-2011-0997 影响 n/a n/a。利用概率较高，应尽快评估。ISC DHCP是美国Internet Systems Consortium（ISC）公司的一套开源的动态主机配置协议服务器软件。 ISC DHCP 4.2.1-P1之前的3.0.x至4.2.x版本，3.1-ESV-R1之前的3.1-ESV版本和4.1-ESV-R2之前的4.1-ESV版本的dhclient中存在输入验证漏洞。ISC dhclient将响应传 CVE-2011-0997 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2011-0997

一、 漏洞 CVE-2011-0997 基础信息

受影响产品

二、漏洞 CVE-2011-0997 的公开POC

三、漏洞 CVE-2011-0997 的情报信息

CVE-2011-0997 厂商安全公告 (27)

• https://bugzilla.redhat.com/show_bug.cgi?id=689832 x_refsource_CONFIRM
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 x_refsource_CONFIRM
• http://secunia.com/advisories/44127 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44090 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44089 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/47176 vdb-entry x_refsource_BID
• http://www.osvdb.org/71493 vdb-entry x_refsource_OSVDB
• http://secunia.com/advisories/44103 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44037 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44180 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/44048 third-party-advisory x_refsource_SECUNIA
• http://securitytracker.com/id?1025300 vdb-entry x_refsource_SECTRACK
• http://www.debian.org/security/2011/dsa-2217 vendor-advisory x_refsource_DEBIAN
• http://www.debian.org/security/2011/dsa-2216 vendor-advisory x_refsource_DEBIAN
• http://www.kb.cert.org/vuls/id/107886 third-party-advisory x_refsource_CERT-VN
• http://www.ubuntu.com/usn/USN-1108-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2011/0926 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0886 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0879 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0909 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/1000 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0965 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0915 vdb-entry x_refsource_VUPEN
• http://security.gentoo.org/glsa/glsa-201301-06.xml vendor-advisory x_refsource_GENTOO
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:073 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812 vdb-entry signature x_refsource_OVAL
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66580 vdb-entry x_refsource_XF

CVE-2011-0997 邮件列表归档 (3)

• http://marc.info/?l=bugtraq&m=133226187115472&w=2 vendor-advisory x_refsource_HP
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html vendor-advisory x_refsource_FEDORA
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.html vendor-advisory x_refsource_FEDORA

CVE-2011-0997 其他参考 (3)

• http://www.redhat.com/support/errata/RHSA-2011-0840.html vendor-advisory x_refsource_REDHAT
• http://www.redhat.com/support/errata/RHSA-2011-0428.html vendor-advisory x_refsource_REDHAT
• http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345 vendor-advisory x_refsource_SLACKWARE

• https://www.cve.org/CVERecord?id=CVE-2011-0997

同批安全公告 · n/a · 2011-04-08 · 共 10 条

IV. Related Vulnerabilities

V. Comments for CVE-2011-0997