Red Hat Security AdvisoryRHSA-2011:0433
xorg-x11-server-utils security update
Released 2011-04-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) xorg-x11-server-utils-7.1-5.el5_6.1, xorg-x11-server-utils-7.1-5.el5_6.1.i386, xorg-x11-server-utils-7.1-5.el5_6.1.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 6) xorg-x11-server-utils-7.4-15.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) xorg-x11-server-utils-7.4-15.el6_0.1
- Red Hat Enterprise Linux Server (v. 6) xorg-x11-server-utils-7.4-15.el6_0.1
- Red Hat Enterprise Linux Workstation (v. 6) xorg-x11-server-utils-7.4-15.el6_0.1
Fixes 1 record
Priority MEDIUM 49
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05781 · Published 2011-04-08 · Fixed CWE-20