description: The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.
problem types: insufficient checking of DHCP options
affected:
{
product: dhcpv6
vendor: dhcpv6 project
versions:
status: affected, version: through 2011-07-25
}