CVE-2011-0465: xrdb.c in xrdb before 1.0.9 in X.Org X11R7.6 and earlier allows remote attackers to execute arbitrary comma...

Security readout for executives and security teams

CVE-2011-0465 is a command execution flaw in X.Org xrdb before 1.0.9. A hostile network hostname delivered through DHCP or XDMCP could be interpreted unsafely, allowing commands to run. The public data describes serious impact, but does not provide CVSS scoring or current exploitation evidence. Exposure is most likely on legacy Unix/Linux graphical systems with affected X.Org xrdb packages, especially systems using DHCP or XDMCP in untrusted network environments. Modern fully patched distributions are less likely exposed, but legacy images and appliances should be checked. Treat this as high priority for legacy graphical Unix/Linux environments because the described impact is arbitrary command execution from network-supplied hostnames. For current patched workstations, priority depends on inventory results and whether affected xrdb versions remain deployed. Mitigation focus: Upgrade xrdb to version 1.0.9 or vendor-fixed packages.; Apply relevant distribution advisories from Red Hat, Debian, Ubuntu, Fedora, or Slackware.; Restrict affected hosts from untrusted DHCP and XDMCP sources until remediated..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.