Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC DHCP dhclient响应处理shell元字符代码执行漏洞
Vulnerability Description
ISC DHCP是美国Internet Systems Consortium（ISC）公司的一套开源的动态主机配置协议服务器软件。 ISC DHCP 4.2.1-P1之前的3.0.x至4.2.x版本，3.1-ESV-R1之前的3.1-ESV版本和4.1-ESV-R2之前的4.1-ESV版本的dhclient中存在输入验证漏洞。ISC dhclient将响应传输给dhclient-script之前没有去除或转义某些dhcp服务器返回的shell元字符，远程攻击者可利用此漏洞在客户端上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A