製品・ソフトウェアに関する情報

JVN脆弱性詳細

ISC DHCP クライアントに任意のコードを実行される脆弱性

Title	ISC DHCP クライアントに任意のコードを実行される脆弱性
Summary	ISC DHCP クライアントには、任意のコードを実行される脆弱性が存在します。なお、ISC から、以下の脆弱性情報が公開されています。 "ISC dhclient did not strip or escape certain shell meta-characters in responses from the dhcp server (like hostname) before passing the responses on to dhclient-script. Depending on the script and OS, this can result in execution of exploit code on the client."
Possible impacts	遠隔の第三者によって、任意のコードを実行される可能性があります。
Solution	[アップデートする] 開発者や配布元が提供する情報をもとに最新版にアップデートしてください。
Publication Date	April 6, 2011, midnight
Registration Date	April 28, 2011, 3:28 p.m.
Last Update	Aug. 11, 2011, 10:03 a.m.

CVSS2.0 : 危険
Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected System

レッドハット

Red Hat Enterprise Linux 4 (as)

Red Hat Enterprise Linux 4 (es)

Red Hat Enterprise Linux 4 (ws)

Red Hat Enterprise Linux 4.8 (as)

Red Hat Enterprise Linux 4.8 (es)

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 4.0

Red Hat Enterprise Linux Desktop 5.0 (client)

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux ELS 3

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Long Life (v. 5.6 server)

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Workstation 6

RHEL Desktop Workstation 5 (client)

ISC, Inc.

ISC DHCP 3.1-ESV-R1 より前のバージョン

ISC DHCP 4.1-ESV-R2 より前のバージョン

ISC DHCP 4.2.1-P1 より前のバージョン

ターボリナックス

Turbolinux Appliance Server 2.0 (延長メンテナンス)

Turbolinux Appliance Server 3.0

Turbolinux Appliance Server 3.0 (x64)

Turbolinux Server 10 (延長メンテナンス)

Turbolinux Server 10 (x64) (延長メンテナンス)

Turbolinux Server 11

Turbolinux Server 11 (x64)

VMware

VMware ESX 3.0.3

VMware ESX 3.5

VMware ESX 4.0

VMware ESX 4.1

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-0997	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997
Knowledge Base
2	CVE-2011-0997: dhclient Does Not Strip or Escape Shell Meta-characters	https://www.isc.org/software/dhcp/advisories/cve-2011-0997
National Vulnerability Database (NVD)
3	CVE-2011-0997	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0997

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
ISC, Inc.
1	dhcp-3.1-ESV-R1-RELNOTES	http://ftp.isc.org/isc/dhcp/dhcp-3.1-ESV-R1-RELNOTES
2	dhcp-4.1-ESV-R2-RELNOTES	http://ftp.isc.org/isc/dhcp/dhcp-4.1-ESV-R2-RELNOTES
3	dhcp-4.2.1-P1-RELNOTES	http://ftp.isc.org/isc/dhcp/dhcp-4.2.1-P1-RELNOTES
4	Internet Systems Consortium	https://www.isc.org
Red Hat Security Advisory
5	RHSA-2011:0428	https://rhn.redhat.com/errata/RHSA-2011-0428.html
6	RHSA-2011:0840	https://rhn.redhat.com/errata/RHSA-2011-0840.html
Turbolinux Security Advisory
7	TLSA-2011-16	http://www.turbolinux.co.jp/security/2011/TLSA-2011-16j.txt
VMware Security Advisories
8	VMSA-2011-0010	http://www.vmware.com/security/advisories/VMSA-2011-0010.html

その他

No	Name	URL
ISS X-Force Database
1	66580	http://xforce.iss.net/xforce/xfdb/66580
JVN
2	JVNVU#107886	http://jvn.jp/cert/JVNVU107886
OPEN SOURCE VULNERABILITY DATABASE (OSVDB)
3	71493	http://osvdb.org/71493
Secunia Advisory
4	SA44037	http://secunia.com/advisories/44037
5	Secunia Advisory SA44127	http://secunia.com/advisories/44127
SecurityFocus
6	47176	http://www.securityfocus.com/bid/47176
SecurityTracker
7	1025300	http://securitytracker.com/id?1025300
US-CERT Vulnerability Note
8	VU#107886	http://www.kb.cert.org/vuls/id/107886
VUPEN Security
9	VUPEN/ADV-2011-0879	http://www.vupen.com/english/advisories/2011/0879

Change Log

No	Changed Details	Date of change
0	[2011年04月28日] 掲載 [2011年06月06日] 影響を受けるシステム：レッドハット (RHSA-2011:0840) の情報を追加ベンダ情報：レッドハット (RHSA-2011:0840) を追加 [2011年06月10日] 影響を受けるシステム：ターボリナックス (TLSA-2011-16) の情報を追加ベンダ情報：ターボリナックス (TLSA-2011-16) を追加 [2011年08月11日] 影響を受けるシステム：VMware (VMSA-2011-0010) の情報を追加ベンダ情報：VMware (VMSA-2011-0010) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2011-0997

Summary	dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to dhclient-script.
Publication Date	April 9, 2011, 12:17 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:25 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:isc:dhcp:3.0.4:b2::::::
cpe:2.3:a:isc:dhcp:3.1.0:b1::::::
cpe:2.3:a:isc:dhcp:3.1.0:a3::::::
cpe:2.3:a:isc:dhcp:3.0.6:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.2:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.0:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.4:b1::::::
cpe:2.3:a:isc:dhcp:3.1.0:a1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc12::::::
cpe:2.3:a:isc:dhcp:3.0:::::::*
cpe:2.3:a:isc:dhcp:3.0.2:b1::::::
cpe:2.3:a:isc:dhcp:3.0.3:b1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.4:b3::::::
cpe:2.3:a:isc:dhcp:3.0.2:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc7::::::
cpe:2.3:a:isc:dhcp:3.1-esv:::::::*
cpe:2.3:a:isc:dhcp:3.0.2:rc3::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc2::::::
cpe:2.3:a:isc:dhcp:3.1.3:b1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc14::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc6::::::
cpe:2.3:a:isc:dhcp:3.0.2:rc2::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc13::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc9::::::
cpe:2.3:a:isc:dhcp:3.0.3:b3::::::
cpe:2.3:a:isc:dhcp:3.1.1:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.0:a2::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc8::::::
cpe:2.3:a:isc:dhcp:3.0.3:b2::::::
cpe:2.3:a:isc:dhcp:3.1.2:b1::::::
cpe:2.3:a:isc:dhcp:3.1.3:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc10::::::
cpe:2.3:a:isc:dhcp:3.0.5:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc11::::::
cpe:2.3:a:isc:dhcp:3.1.1:rc2::::::
cpe:2.3:a:isc:dhcp:3.0.4:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.0:b2::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc5::::::
cpe:2.3:a:isc:dhcp:3.0.1:-::::::
cpe:2.3:a:isc:dhcp:3.0.2:-::::::
cpe:2.3:a:isc:dhcp:3.0.4:-::::::
cpe:2.3:a:isc:dhcp:3.0.5:-::::::
cpe:2.3:a:isc:dhcp:3.1.0:-::::::
cpe:2.3:a:isc:dhcp:3.1.2:-::::::
cpe:2.3:a:isc:dhcp:3.1.3:-::::::
cpe:2.3:a:isc:dhcp:3.0.3:-::::::

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:isc:dhcp:4.2.0:b2::::::
cpe:2.3:a:isc:dhcp:4.2.0:a2::::::
cpe:2.3:a:isc:dhcp:4.2.0:b1::::::
cpe:2.3:a:isc:dhcp:4.2.1:rc1::::::
cpe:2.3:a:isc:dhcp:4.2.0:a1::::::
cpe:2.3:a:isc:dhcp:4.1-esv:rc1::::::
cpe:2.3:a:isc:dhcp:4.2.1:b1::::::
cpe:2.3:a:isc:dhcp:4.2.0:rc1::::::
cpe:2.3:a:isc:dhcp:4.2.0:p1::::::
cpe:2.3:a:isc:dhcp:4.1-esv:-::::::
cpe:2.3:a:isc:dhcp:4.2.0:-::::::
cpe:2.3:a:isc:dhcp:4.2.1:-::::::

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:5.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*
cpe:2.3:o:debian:debian_linux:6.0:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::*

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761	Third Party Advisory
2	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html	Mailing List Third Party Advisory
3	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.html	Mailing List Third Party Advisory
4	http://marc.info/?l=bugtraq&m=133226187115472&w=2	Mailing List Third Party Advisory
5	http://marc.info/?l=bugtraq&m=133226187115472&w=2	Mailing List Third Party Advisory
6	http://secunia.com/advisories/44037	Third Party Advisory
7	http://secunia.com/advisories/44048	Third Party Advisory
8	http://secunia.com/advisories/44089	Third Party Advisory
9	http://secunia.com/advisories/44090	Third Party Advisory
10	http://secunia.com/advisories/44103	Third Party Advisory
11	http://secunia.com/advisories/44127	Third Party Advisory
12	http://secunia.com/advisories/44180	Third Party Advisory
13	http://security.gentoo.org/glsa/glsa-201301-06.xml	Third Party Advisory
14	http://securitytracker.com/id?1025300	Third Party Advisory VDB Entry
15	http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345	Third Party Advisory
16	http://www.debian.org/security/2011/dsa-2216	Third Party Advisory
17	http://www.debian.org/security/2011/dsa-2217	Third Party Advisory
18	http://www.kb.cert.org/vuls/id/107886	Third Party Advisory US Government Resource
19	http://www.mandriva.com/security/advisories?name=MDVSA-2011:073	Third Party Advisory
20	http://www.osvdb.org/71493	Broken Link
21	http://www.redhat.com/support/errata/RHSA-2011-0428.html	Third Party Advisory
22	http://www.redhat.com/support/errata/RHSA-2011-0840.html	Third Party Advisory
23	http://www.securityfocus.com/bid/47176	Third Party Advisory VDB Entry
24	http://www.ubuntu.com/usn/USN-1108-1	Third Party Advisory
25	http://www.vupen.com/english/advisories/2011/0879	Permissions Required
26	http://www.vupen.com/english/advisories/2011/0886	Permissions Required
27	http://www.vupen.com/english/advisories/2011/0909	Permissions Required
28	http://www.vupen.com/english/advisories/2011/0915	Permissions Required
29	http://www.vupen.com/english/advisories/2011/0926	Permissions Required
30	http://www.vupen.com/english/advisories/2011/0965	Permissions Required
31	http://www.vupen.com/english/advisories/2011/1000	Permissions Required
32	https://bugzilla.redhat.com/show_bug.cgi?id=689832	Issue Tracking Patch Third Party Advisory
33	https://exchange.xforce.ibmcloud.com/vulnerabilities/66580	Third Party Advisory VDB Entry
34	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812	Third Party Advisory
35	https://www.exploit-db.com/exploits/37623/	Third Party Advisory VDB Entry
36	https://www.isc.org/software/dhcp/advisories/cve-2011-0997	Patch Vendor Advisory
37	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761	Third Party Advisory
38	https://www.isc.org/software/dhcp/advisories/cve-2011-0997	Patch Vendor Advisory
39	https://www.exploit-db.com/exploits/37623/	Third Party Advisory VDB Entry
40	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12812	Third Party Advisory
41	https://exchange.xforce.ibmcloud.com/vulnerabilities/66580	Third Party Advisory VDB Entry
42	https://bugzilla.redhat.com/show_bug.cgi?id=689832	Issue Tracking Patch Third Party Advisory
43	http://www.vupen.com/english/advisories/2011/1000	Permissions Required
44	http://www.vupen.com/english/advisories/2011/0965	Permissions Required
45	http://www.vupen.com/english/advisories/2011/0926	Permissions Required
46	http://www.vupen.com/english/advisories/2011/0915	Permissions Required
47	http://www.vupen.com/english/advisories/2011/0909	Permissions Required
48	http://www.vupen.com/english/advisories/2011/0886	Permissions Required
49	http://www.vupen.com/english/advisories/2011/0879	Permissions Required
50	http://www.ubuntu.com/usn/USN-1108-1	Third Party Advisory
51	http://www.securityfocus.com/bid/47176	Third Party Advisory VDB Entry
52	http://www.redhat.com/support/errata/RHSA-2011-0840.html	Third Party Advisory
53	http://www.redhat.com/support/errata/RHSA-2011-0428.html	Third Party Advisory
54	http://www.osvdb.org/71493	Broken Link
55	http://www.mandriva.com/security/advisories?name=MDVSA-2011:073	Third Party Advisory
56	http://www.kb.cert.org/vuls/id/107886	Third Party Advisory US Government Resource
57	http://www.debian.org/security/2011/dsa-2217	Third Party Advisory
58	http://www.debian.org/security/2011/dsa-2216	Third Party Advisory
59	http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593345	Third Party Advisory
60	http://securitytracker.com/id?1025300	Third Party Advisory VDB Entry
61	http://security.gentoo.org/glsa/glsa-201301-06.xml	Third Party Advisory
62	http://secunia.com/advisories/44180	Third Party Advisory
63	http://secunia.com/advisories/44127	Third Party Advisory
64	http://secunia.com/advisories/44103	Third Party Advisory
65	http://secunia.com/advisories/44090	Third Party Advisory
66	http://secunia.com/advisories/44089	Third Party Advisory
67	http://secunia.com/advisories/44048	Third Party Advisory
68	http://secunia.com/advisories/44037	Third Party Advisory
69	http://marc.info/?l=bugtraq&m=133226187115472&w=2	Mailing List Third Party Advisory
70	http://marc.info/?l=bugtraq&m=133226187115472&w=2	Mailing List Third Party Advisory
71	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058279.html	Mailing List Third Party Advisory
72	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057888.html	Mailing List Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:isc:dhcp:3.0.4:b2::::::
cpe:2.3:a:isc:dhcp:3.1.0:b1::::::
cpe:2.3:a:isc:dhcp:3.1.0:a3::::::
cpe:2.3:a:isc:dhcp:3.0.6:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.2:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.0:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.4:b1::::::
cpe:2.3:a:isc:dhcp:3.1.0:a1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc12::::::
cpe:2.3:a:isc:dhcp:3.0:::::::*
cpe:2.3:a:isc:dhcp:3.0.2:b1::::::
cpe:2.3:a:isc:dhcp:3.0.3:b1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.4:b3::::::
cpe:2.3:a:isc:dhcp:3.0.2:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc7::::::
cpe:2.3:a:isc:dhcp:3.1-esv:::::::*
cpe:2.3:a:isc:dhcp:3.0.2:rc3::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc2::::::
cpe:2.3:a:isc:dhcp:3.1.3:b1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc14::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc6::::::
cpe:2.3:a:isc:dhcp:3.0.2:rc2::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc13::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc9::::::
cpe:2.3:a:isc:dhcp:3.0.3:b3::::::
cpe:2.3:a:isc:dhcp:3.1.1:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.0:a2::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc8::::::
cpe:2.3:a:isc:dhcp:3.0.3:b2::::::
cpe:2.3:a:isc:dhcp:3.1.2:b1::::::
cpe:2.3:a:isc:dhcp:3.1.3:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc10::::::
cpe:2.3:a:isc:dhcp:3.0.5:rc1::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc11::::::
cpe:2.3:a:isc:dhcp:3.1.1:rc2::::::
cpe:2.3:a:isc:dhcp:3.0.4:rc1::::::
cpe:2.3:a:isc:dhcp:3.1.0:b2::::::
cpe:2.3:a:isc:dhcp:3.0.1:rc5::::::
cpe:2.3:a:isc:dhcp:3.0.1:-::::::
cpe:2.3:a:isc:dhcp:3.0.2:-::::::
cpe:2.3:a:isc:dhcp:3.0.4:-::::::
cpe:2.3:a:isc:dhcp:3.0.5:-::::::
cpe:2.3:a:isc:dhcp:3.1.0:-::::::
cpe:2.3:a:isc:dhcp:3.1.2:-::::::
cpe:2.3:a:isc:dhcp:3.1.3:-::::::
cpe:2.3:a:isc:dhcp:3.0.3:-::::::

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:isc:dhcp:4.2.0:b2::::::
cpe:2.3:a:isc:dhcp:4.2.0:a2::::::
cpe:2.3:a:isc:dhcp:4.2.0:b1::::::
cpe:2.3:a:isc:dhcp:4.2.1:rc1::::::
cpe:2.3:a:isc:dhcp:4.2.0:a1::::::
cpe:2.3:a:isc:dhcp:4.1-esv:rc1::::::
cpe:2.3:a:isc:dhcp:4.2.1:b1::::::
cpe:2.3:a:isc:dhcp:4.2.0:rc1::::::
cpe:2.3:a:isc:dhcp:4.2.0:p1::::::
cpe:2.3:a:isc:dhcp:4.1-esv:-::::::
cpe:2.3:a:isc:dhcp:4.2.0:-::::::
cpe:2.3:a:isc:dhcp:4.2.1:-::::::