CVE-2011-0465: Matthias Hopf Xrdb

High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days.

xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a (1) DHCP or (2) XDMCP message.

Affected products

• Matthias Hopf Xrdb: up to and including 1.0.8; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; version 1.0.6 only; …
• X x11: up to and including r7.6; version r1 only; version r2 only; version r3 only; version r4 only; version r5 only; …

Published 2011-04-08. Last modified 2026-06-16.