Impact
remote code execution
Solution
Please Install the Updated Packages.
Insight
The xrdb helper program of the xorg-x11 package passes untrusted input such as hostnames retrieved via DHCP or client hostnames of XDMCP sessions to popen() without sanitization.
Therefore, remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 servers or to XDMCP clients.
CVE-2011-0465 has been assigned to this issue.
Affected
xorg-x11 on openSUSE 11.2, openSUSE 11.3, SUSE SLES 9
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2011-0465 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities