Red Hat Security AdvisoryRHSA-2011:0432
xorg-x11 security update
Released 2011-04-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 xorg-x11-6.8.2-1.EL.67, xorg-x11-6.8.2-1.EL.67.i386, xorg-x11-6.8.2-1.EL.67.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 xorg-x11-6.8.2-1.EL.67, xorg-x11-6.8.2-1.EL.67.i386, xorg-x11-Mesa-libGL-6.8.2-1.EL.67 +33
- Red Hat Enterprise Linux ES version 4 xorg-x11-6.8.2-1.EL.67, xorg-x11-6.8.2-1.EL.67.i386, xorg-x11-6.8.2-1.EL.67.ia64 +47
- Red Hat Enterprise Linux WS version 4 xorg-x11-6.8.2-1.EL.67, xorg-x11-6.8.2-1.EL.67.i386, xorg-x11-6.8.2-1.EL.67.ia64 +47
Fixes 1 record
Priority MEDIUM 49
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05781 · Published 2011-04-08 · Fixed CWE-20