[SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 750-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1848

CVE-2005-1848 affects the dhcpcd DHCP client (pre-1.3.22). The issue is an out-of-bounds memory read that can cause the dhcpcd daemon to crash, enabling a denial-of-service condition. Public references note advisories and distributions (e.g., Debian DSA-750-1, Gentoo GLSA 200507-16, Slackware SSA...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

CVE-2005-1848

The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service daemon crash via unknown vectors that cause an out-of-bounds memory read...

DSA-750-1 dhcpcd - out-of-bound memory access

Bulletin has no description...

CVE-2002-1403

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script...

CVE-2002-1403

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script...

Mandrake Linux Security Advisory : dhcpcd (MDKSA-2003:003)

A vulnerability was discovered by Simon Kelley in the dhcpcd DHCP client daemon. dhcpcd has the ability to execute an external script named dhcpcd-.exe when an IP address is assigned to that network interface. The script sources the file /var/lib/dhcpcd/dhcpcd-.info which contains shell variables...

CVE-2002-1403

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script...

DSA-219 dhcpcd - remote command execution

Simon Kelly discovered a vulnerability in dhcpcd, an RFC2131 and RFC1541 compliant DHCP client daemon, that runs with root privileges on client machines. A malicious administrator of the regular or an untrusted DHCP server may execute any command with root privileges on the DHCP client machine by...

Remote code execution via SuSE sysconfig

Invalid usage of DHCP client allows command execution by spoofing DHCP server reply...

CVE-2000-0585

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...

[SECURITY] New verion of dhcp released (updated)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone July 28, 2000 - ------------------------------------------------------------------------ Package: dhcp-client-beta dhcp-client...

Linux news 14.07.00

Linux Kernel pre-patch 2.4.0 test4-pre6 Вышел очередной, шестой по счету, пререлиз четвертого тестового ядра Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Домен .GNU По сообщению http://Wired.com, Free Software Foundation послали предложение в ICANN на регистрацию...

[SECURITY] New verion of dhcp released

Package: dhcp-client-beta dhcp-client Vulnerability type: remote root exploit Debian-specific: no The versions of the ISC DHCP client in debian 2.1 slink and debian 2.2 potato are vulnerable to a root exploit. The OpenBSD team reports that the client inappropriately executes commands embedded in...

[SECURITY] New verion of dhcp released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone June 27, 2000 - ------------------------------------------------------------------------ Package: dhcp-client-beta dhcp-client...

isc-dhcpd.exploit.txt

Somebody at OpenBSD discovered a possible root exploit in the ISC DHCP client. I can confirm that as of 6:23am on June 23rd after several hours of hacking around the sources I had the following dhcpd config running on my own machine's private network for testing: shared-network LOCAL-NET option...