Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#23609 - [dhclient] dhclient does not strip or escape shell meta-characters
Attached to Project:
Arch Linux
Opened by Isenmann Daniel (ise) - Wednesday, 06 April 2011, 11:50 GMT
Last edited by Isenmann Daniel (ise) - Thursday, 14 April 2011, 10:24 GMT
Opened by Isenmann Daniel (ise) - Wednesday, 06 April 2011, 11:50 GMT
Last edited by Isenmann Daniel (ise) - Thursday, 14 April 2011, 10:24 GMT
|
DetailsISC dhclient did not strip or escape certain shell meta-characters in responses from the dhcp server (like hostname) before passing the responses on to dhclient-script. Depending on the script and OS, this can result in execution of exploit code on the client.
https://www.isc.org/software/dhcp/advisories/cve-2011-0997 |
This task depends upon
Closed by Isenmann Daniel (ise)
Thursday, 14 April 2011, 10:24 GMT
Reason for closing: Fixed
Additional comments about closing: Fixed in pacakge 4.2.1.1-1
Thursday, 14 April 2011, 10:24 GMT
Reason for closing: Fixed
Additional comments about closing: Fixed in pacakge 4.2.1.1-1