Lucene search
HistoryOct 11, 2007 - 10:17 a.m.
CVE-2007-5365
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.928 High
EPSS
Percentile
99.0%
Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.
Affected configurations
Node
debiandebian_linuxMatch3.1
ORdebiandebian_linuxMatch4.0
ORopenbsdopenbsdMatch4.0
ORopenbsdopenbsdMatch4.1
ORopenbsdopenbsdMatch4.2
ORredhatenterprise_linuxMatch2.1as
ORredhatenterprise_linuxMatch2.1es
ORredhatlinux_advanced_workstationMatch2.1itanium
ORsunopensolarisMatchsnv_01sparc
ORsunopensolarisMatchsnv_01x86
ORsunopensolarisMatchsnv_02sparc
ORsunopensolarisMatchsnv_02x86
ORsunopensolarisMatchsnv_03sparc
ORsunopensolarisMatchsnv_03x86
ORsunopensolarisMatchsnv_04sparc
ORsunopensolarisMatchsnv_04x86
ORsunopensolarisMatchsnv_05sparc
ORsunopensolarisMatchsnv_05x86
ORsunopensolarisMatchsnv_06sparc
ORsunopensolarisMatchsnv_06x86
ORsunopensolarisMatchsnv_07sparc
ORsunopensolarisMatchsnv_07x86
ORsunopensolarisMatchsnv_08sparc
ORsunopensolarisMatchsnv_08x86
ORsunopensolarisMatchsnv_09sparc
ORsunopensolarisMatchsnv_09x86
ORsunopensolarisMatchsnv_10sparc
ORsunopensolarisMatchsnv_10x86
ORsunopensolarisMatchsnv_11sparc
ORsunopensolarisMatchsnv_11x86
ORsunopensolarisMatchsnv_12sparc
ORsunopensolarisMatchsnv_12x86
ORsunopensolarisMatchsnv_13sparc
ORsunopensolarisMatchsnv_13x86
ORsunopensolarisMatchsnv_14sparc
ORsunopensolarisMatchsnv_14x86
ORsunopensolarisMatchsnv_15sparc
ORsunopensolarisMatchsnv_15x86
ORsunopensolarisMatchsnv_16sparc
ORsunopensolarisMatchsnv_16x86
ORsunopensolarisMatchsnv_17sparc
ORsunopensolarisMatchsnv_17x86
ORsunopensolarisMatchsnv_18sparc
ORsunopensolarisMatchsnv_18x86
ORsunopensolarisMatchsnv_19sparc
ORsunopensolarisMatchsnv_19x86
ORsunopensolarisMatchsnv_20sparc
ORsunopensolarisMatchsnv_20x86
ORsunopensolarisMatchsnv_21sparc
ORsunopensolarisMatchsnv_21x86
ORsunopensolarisMatchsnv_22sparc
ORsunopensolarisMatchsnv_22x86
ORsunopensolarisMatchsnv_23sparc
ORsunopensolarisMatchsnv_23x86
ORsunopensolarisMatchsnv_24sparc
ORsunopensolarisMatchsnv_24x86
ORsunopensolarisMatchsnv_25sparc
ORsunopensolarisMatchsnv_25x86
ORsunopensolarisMatchsnv_26sparc
ORsunopensolarisMatchsnv_26x86
ORsunopensolarisMatchsnv_27sparc
ORsunopensolarisMatchsnv_27x86
ORsunopensolarisMatchsnv_28sparc
ORsunopensolarisMatchsnv_28x86
ORsunopensolarisMatchsnv_29sparc
ORsunopensolarisMatchsnv_29x86
ORsunopensolarisMatchsnv_30sparc
ORsunopensolarisMatchsnv_30x86
ORsunopensolarisMatchsnv_31sparc
ORsunopensolarisMatchsnv_31x86
ORsunopensolarisMatchsnv_32sparc
ORsunopensolarisMatchsnv_32x86
ORsunopensolarisMatchsnv_33sparc
ORsunopensolarisMatchsnv_33x86
ORsunopensolarisMatchsnv_34sparc
ORsunopensolarisMatchsnv_34x86
ORsunopensolarisMatchsnv_35sparc
ORsunopensolarisMatchsnv_35x86
ORsunopensolarisMatchsnv_36sparc
ORsunopensolarisMatchsnv_36x86
ORsunopensolarisMatchsnv_37sparc
ORsunopensolarisMatchsnv_37x86
ORsunopensolarisMatchsnv_38sparc
ORsunopensolarisMatchsnv_38x86
ORsunopensolarisMatchsnv_39sparc
ORsunopensolarisMatchsnv_39x86
ORsunopensolarisMatchsnv_40sparc
ORsunopensolarisMatchsnv_40x86
ORsunopensolarisMatchsnv_41sparc
ORsunopensolarisMatchsnv_41x86
ORsunopensolarisMatchsnv_42sparc
ORsunopensolarisMatchsnv_42x86
ORsunopensolarisMatchsnv_43sparc
ORsunopensolarisMatchsnv_43x86
ORsunopensolarisMatchsnv_44sparc
ORsunopensolarisMatchsnv_44x86
ORsunopensolarisMatchsnv_45sparc
ORsunopensolarisMatchsnv_45x86
ORsunopensolarisMatchsnv_46sparc
ORsunopensolarisMatchsnv_46x86
ORsunopensolarisMatchsnv_47sparc
ORsunopensolarisMatchsnv_47x86
ORsunopensolarisMatchsnv_48sparc
ORsunopensolarisMatchsnv_48x86
ORsunopensolarisMatchsnv_49sparc
ORsunopensolarisMatchsnv_49x86
ORsunopensolarisMatchsnv_50sparc
ORsunopensolarisMatchsnv_50x86
ORsunopensolarisMatchsnv_51sparc
ORsunopensolarisMatchsnv_51x86
ORsunopensolarisMatchsnv_52sparc
ORsunopensolarisMatchsnv_52x86
ORsunopensolarisMatchsnv_53sparc
ORsunopensolarisMatchsnv_53x86
ORsunopensolarisMatchsnv_54sparc
ORsunopensolarisMatchsnv_54x86
ORsunopensolarisMatchsnv_55sparc
ORsunopensolarisMatchsnv_55x86
ORsunopensolarisMatchsnv_56sparc
ORsunopensolarisMatchsnv_56x86
ORsunopensolarisMatchsnv_57sparc
ORsunopensolarisMatchsnv_57x86
ORsunopensolarisMatchsnv_58sparc
ORsunopensolarisMatchsnv_58x86
ORsunopensolarisMatchsnv_59sparc
ORsunopensolarisMatchsnv_59x86
ORsunopensolarisMatchsnv_60sparc
ORsunopensolarisMatchsnv_60x86
ORsunopensolarisMatchsnv_61sparc
ORsunopensolarisMatchsnv_61x86
ORsunopensolarisMatchsnv_62sparc
ORsunopensolarisMatchsnv_62x86
ORsunopensolarisMatchsnv_63sparc
ORsunopensolarisMatchsnv_63x86
ORsunopensolarisMatchsnv_64sparc
ORsunopensolarisMatchsnv_64x86
ORsunopensolarisMatchsnv_65sparc
ORsunopensolarisMatchsnv_65x86
ORsunopensolarisMatchsnv_66sparc
ORsunopensolarisMatchsnv_66x86
ORsunopensolarisMatchsnv_67sparc
ORsunopensolarisMatchsnv_67x86
ORsunopensolarisMatchsnv_68sparc
ORsunopensolarisMatchsnv_68x86
ORsunopensolarisMatchsnv_69sparc
ORsunopensolarisMatchsnv_69x86
ORsunopensolarisMatchsnv_70sparc
ORsunopensolarisMatchsnv_70x86
ORsunopensolarisMatchsnv_71sparc
ORsunopensolarisMatchsnv_71x86
ORsunopensolarisMatchsnv_72sparc
ORsunopensolarisMatchsnv_72x86
ORsunopensolarisMatchsnv_73sparc
ORsunopensolarisMatchsnv_73x86
ORsunopensolarisMatchsnv_74sparc
ORsunopensolarisMatchsnv_74x86
ORsunopensolarisMatchsnv_75sparc
ORsunopensolarisMatchsnv_75x86
ORsunopensolarisMatchsnv_76sparc
ORsunopensolarisMatchsnv_76x86
ORsunopensolarisMatchsnv_77sparc
ORsunopensolarisMatchsnv_77x86
ORsunopensolarisMatchsnv_78sparc
ORsunopensolarisMatchsnv_78x86
ORsunopensolarisMatchsnv_79sparc
ORsunopensolarisMatchsnv_79x86
ORsunopensolarisMatchsnv_80sparc
ORsunopensolarisMatchsnv_80x86
ORsunopensolarisMatchsnv_81sparc
ORsunopensolarisMatchsnv_81x86
ORsunopensolarisMatchsnv_82sparc
ORsunopensolarisMatchsnv_82x86
ORsunopensolarisMatchsnv_83sparc
ORsunopensolarisMatchsnv_83x86
ORsunopensolarisMatchsnv_84sparc
ORsunopensolarisMatchsnv_84x86
ORsunopensolarisMatchsnv_85sparc
ORsunopensolarisMatchsnv_85x86
ORsunopensolarisMatchsnv_86sparc
ORsunopensolarisMatchsnv_86x86
ORsunopensolarisMatchsnv_87sparc
ORsunopensolarisMatchsnv_87x86
ORsunopensolarisMatchsnv_88sparc
ORsunopensolarisMatchsnv_88x86
ORsunopensolarisMatchsnv_89sparc
ORsunopensolarisMatchsnv_89x86
ORsunopensolarisMatchsnv_90sparc
ORsunopensolarisMatchsnv_90x86
ORsunopensolarisMatchsnv_91sparc
ORsunopensolarisMatchsnv_91x86
ORsunopensolarisMatchsnv_92sparc
ORsunopensolarisMatchsnv_92x86
ORsunopensolarisMatchsnv_93sparc
ORsunopensolarisMatchsnv_93x86
ORsunopensolarisMatchsnv_94sparc
ORsunopensolarisMatchsnv_94x86
ORsunopensolarisMatchsnv_95sparc
ORsunopensolarisMatchsnv_95x86
ORsunopensolarisMatchsnv_96sparc
ORsunopensolarisMatchsnv_96x86
ORsunopensolarisMatchsnv_97sparc
ORsunopensolarisMatchsnv_97x86
ORsunopensolarisMatchsnv_98sparc
ORsunopensolarisMatchsnv_98x86
ORsunopensolarisMatchsnv_99sparc
ORsunopensolarisMatchsnv_99x86
ORsunopensolarisMatchsnv_100sparc
ORsunopensolarisMatchsnv_100x86
ORsunopensolarisMatchsnv_101sparc
ORsunopensolarisMatchsnv_101x86
ORsunopensolarisMatchsnv_102sparc
ORsunopensolarisMatchsnv_102x86
ORsunsolarisMatch8.0sparc
ORsunsolarisMatch8.0x86
ORsunsolarisMatch9.0sparc
ORsunsolarisMatch9.0x86
ORsunsolarisMatch10.0sparc
ORsunsolarisMatch10.0x86
ORubuntuubuntu_linuxMatch6.06_nil_lts
ORubuntuubuntu_linuxMatch6.10
ORubuntuubuntu_linuxMatch7.04
ORubuntuubuntu_linuxMatch7.10
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=446354
secunia.com/advisories/27160
secunia.com/advisories/27273
secunia.com/advisories/27338
secunia.com/advisories/27350
secunia.com/advisories/32668
securitytracker.com/id?1021157
sunsolve.sun.com/search/document.do?assetkey=1-21-109077-21-1
sunsolve.sun.com/search/document.do?assetkey=1-26-243806-1
www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1962
www.debian.org/security/2007/dsa-1388
www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/dhcpd/options.c
www.openbsd.org/errata40.html#016_dhcpd
www.openbsd.org/errata41.html#010_dhcpd
www.openbsd.org/errata42.html#001_dhcpd
www.redhat.com/support/errata/RHSA-2007-0970.html
www.securityfocus.com/archive/1/482085/100/100/threaded
www.securityfocus.com/archive/1/483230/100/100/threaded
www.securityfocus.com/bid/25984
www.securityfocus.com/bid/32213
www.securitytracker.com/id?1018794
www.ubuntu.com/usn/usn-531-1
www.ubuntu.com/usn/usn-531-2
www.vupen.com/english/advisories/2008/3088
exchange.xforce.ibmcloud.com/vulnerabilities/37045
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5817
www.exploit-db.com/exploits/4601
Related
exploitpack
exploitpack
Ubuntu 6.06 - DHCPd Remote Denial of Service
2007-11-02 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1388-3)
2008-01-17 00:00:00
Solaris Update for in.dhcpd libresolv and BIND9 114265-17
2009-06-03 00:00:00
Solaris Update for dhcp server and admin 109077-21
2009-06-03 00:00:00
ubuntu
ubuntu
dhcp vulnerability
2007-10-22 00:00:00
dhcp vulnerability
2007-10-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Sun Solaris DHCP Daemon Code Execution (CVE-2007-5365)
2015-10-18 00:00:00
seebug
seebug
Sun Solaris DHCP่ฏทๆฑๅค็ๆผๆด
2008-11-12 00:00:00
Sun Solaris DHCP่ฏทๆฑๅค็ๆ็ปๆๅกๅไปฃ็ ๆง่กๆผๆด
2008-11-14 00:00:00
Ubuntu 6.06 DHCPd bug Remote Denial of Service Exploit
2007-11-03 00:00:00
cvelist
cvelist
CVE-2007-5365
2007-10-11 10:00:00
prion
prion
Stack overflow
2007-10-11 10:17:00
cve
cve
CVE-2007-5365
2007-10-11 10:17:00
debian
debian
[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution
2007-10-29 18:03:32
[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution
2007-10-29 18:03:32
[SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution
2007-10-18 14:25:49
osv
osv
dhcp - buffer overflow
2007-10-29 00:00:00
dhcp
2007-10-29 00:00:00
ubuntucve
ubuntucve
CVE-2007-5365
2007-10-11 00:00:00
nessus
nessus
Solaris 10 (sparc) : 138876-01
2018-03-12 00:00:00
Solaris 10 (x86) : 138877-01
2018-03-12 00:00:00
RHEL 2.1 : dhcp (RHSA-2007:0970)
2007-10-25 00:00:00
centos
centos
dhcp security update
2007-10-23 23:27:07
securityvulns
securityvulns
OpenBSD DHCP server buffer overflow
2007-11-05 00:00:00
redhat
redhat
(RHSA-2007:0970) Important: dhcp security update
2007-10-23 00:00:00
exploitdb
exploitdb
Ubuntu 6.06 - DHCPd Remote Denial of Service
2007-11-02 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.928 High
EPSS
Percentile
99.0%
Related for NVD:CVE-2007-5365