CVE-2011-0465: Input Validation
It was found that xrdb, the X server resource database utility, did not properly sanitize system host names, containing shell escape characters, during launch of user graphical session (when the display manager retrieved the system host name from resource database via xrdb). When the display manager was configured to listen for X Display Manager Control Protocol (XDMCP) messages, a remote attacker could use this flaw to remotely execute arbitrary code with the privileges, of the user running the display manager (usually privileged system user, root). On systems, where the XDMCP messages were disabled and the system was configured to retrieve its host name from remote DHCP server, a rogue DHCP server could use this flaw to possibly execute arbitrary code with the privileges of the user running the display manager (usually root) via a specially-crafted host name assigned to the victim host in question.
Note: ===== The display managers, shipped with Red Hat Enterprise Linux 4, 5, and 6 do not listen for remote XDMCP messages in the default configuration, which mitigates this security flaw to be exploitable only by rogue remote DHCP servers.
The display managers, shipped with Fedora release of 13 and 14 do not listen for remote XDMCP messages in the default configuration, which mitigates this security flaw to be exploitable only by rogue remote DHCP servers.
Other sources
xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0465?
The severity of CVE-2011-0465 is typically rated as medium, indicating that it can potentially lead to security risks if not addressed.
How do I fix CVE-2011-0465?
To fix CVE-2011-0465, users should update to the latest patched version of the affected software, particularly the X.Org Server or xrdb.
Which software versions are affected by CVE-2011-0465?
CVE-2011-0465 affects multiple versions of X.Org Server, specifically from r1 to r7.6, as well as specific versions of xrdb including 1.0.2, 1.0.4, 1.0.7, 1.0.6, etc.
What type of vulnerability is CVE-2011-0465?
CVE-2011-0465 is a security vulnerability that involves improper sanitization of system hostnames, which could allow for shell escape attacks.
Who is impacted by CVE-2011-0465?
Users of the affected versions of X.Org Server and xrdb, particularly those running graphical sessions on vulnerable systems, are impacted by CVE-2011-0465.