Executive Summary

Informations
Name CVE-2011-1930 First vendor Publication 2019-11-14
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 9.8
Base Score 9.8 Environmental Score 9.8
impact SubScore 5.9 Temporal Score 9.8
Exploitabality Sub Score 3.9
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 10 Attack Range Network
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1930

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 3
Os 3

Open Source Vulnerability Database (OSVDB)

Id Description
73394 klibc DHCP Response Handling Metacharacter Shell Command Execution

klibc contains a flaw related to a failure to properly strip shell meta-characters when processing responses from DHCP servers. This may allow a remote attacker to use a crafted hostname response to execute arbitrary shell commands.

Nessus® Vulnerability Scanner

Date Description
2013-09-27 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201309-21.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://security.gentoo.org/glsa/glsa-201309-21.xml
http://www.openwall.com/lists/oss-security/2012/05/22/12
http://www.securityfocus.com/bid/47924
https://access.redhat.com/security/cve/cve-2011-1930
https://security-tracker.debian.org/tracker/CVE-2011-1930
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2024-11-28 22:12:14
  • Multiple Updates
2024-11-28 12:25:44
  • Multiple Updates
2021-06-24 12:08:27
  • Multiple Updates
2021-05-08 12:08:11
  • Multiple Updates
2021-05-08 01:08:11
  • Multiple Updates
2021-05-04 12:15:19
  • Multiple Updates
2021-04-22 01:16:53
  • Multiple Updates
2020-09-03 01:06:38
  • Multiple Updates
2020-05-23 00:28:32
  • First insertion