Debian DSA-1833-1 : dhcp3 - several vulnerabilities

Several remote vulnerabilities have been discovered in ISC's DHCP implementation : - CVE-2009-0692 It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution. - CVE-2009-1892 Christoph Biedl...

Dnsmasq TFTP Service Remote Heap Buffer Overflow (CVE-2009-2957)

Dnsmasq is a lightweight DNS forwarder and DHCP server, designed to provide DNS and optionally DHCP services to a small-scale network. Dnsmasq supports static and dynamic DHCP leases and BOOTP/TFTP/PXE for network booting of diskless machines. It includes a secure, read-only, TFTP server to allow...

Ubuntu: Security Advisory (USN-803-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : dhcp (MDVSA-2009:312)

A vulnerability has been found and corrected in ISC DHCP : Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0....

VMware Mega Patch Plugs Security Holes

Virtualization software specialist VMware has shipped a massive batch of critical security updates to cover 48 security holes in a wide range of its server and workstation products. According to an advisory from VMWare, the vulnerabilities affect the DHCP Server,DHCP Client, Service Console kerne...

[SECURITY] Fedora 11 Update: dnsmasq-2.46-3.fc11

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

SLES10: Security update for dhclient

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp dhcp-client dhcp-devel dhcp-relay dhcp-server More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for dhclient

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp dhcp-client dhcp-devel dhcp-relay dhcp-server More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the...

SLES9: Security update for dhcp-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp-server More details may also be found by searching for keyword 5020296 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for dhcp-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp-server More details may also be found by searching for keyword 5020296 within the SuSE Enterprise Server 9 patch database linked in the references...

Preemptive Protection against Dnsmasq TFTP Service Remote Heap Buffer Overflow

A buffer overflow vulnerability has been reported in Dnsmasq, a lightweight DNS forwarder and DHCP server, designed to provide DNS services to a small-scale network. The vulnerability is due to improper bounds checking when handling TFTP Read requests. A remote attacker can exploit this...

SuSE9 Security Update : dhcp-server (YOU Patch Number 11373)

A bug was fixed were a LDAP server with malicious data providing information to the DHCP server could crash and potentially execute code as the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Debian Security Advisory DSA 1833-2 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory DSA 1833-2. OpenVAS Vulnerability Test $Id: deb18332.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1833-2 dhcp3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1238

The remote host is missing updates announced in advisory RHSA-2009:1238. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core Security Technologies discovered a heap overflow flaw in dnsmasq when the TFTP service is enabled the --enable-tftp command line option, or b...

Mandrake Security Advisory MDVSA-2009:172 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:172. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:154 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:154. OpenVAS Vulnerability Test $Id: mdksa2009154.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:154 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

openSUSE Security Update : dhcp (dhcp-465)

This update contains a backported patch from dhcp-3.0.7 to fix a buffer overflow which could lead to a denial-of-service condition in cases when the dhcp server is configured to send many DHCP options to clients. CVE-2007-0062 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandriva Linux Security Advisory : dhcp (MDVSA-2009:154)

A vulnerability has been found and corrected in ISC DHCP : ISC DHCP Server is vulnerable to a denial of service, caused by the improper handling of DHCP requests. If the host definitions are mixed using dhcp-client-identifier and hardware ethernet, a remote attacker could send specially crafted...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : dhcp3 vulnerability (USN-803-1)

It was discovered that the DHCP client as included in dhcp3 did not verify the length of certain option fields when processing a response from an IPv4 dhcp server. If a user running Ubuntu 6.06 LTS or 8.04 LTS connected to a malicious dhcp server, a remote attacker could cause a denial of service...

GLSA-200907-12 : ISC DHCP: dhcpclient Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-12 ISC DHCP: dhcpclient Remote execution of arbitrary code The Mandriva Linux Engineering Team has reported a stack-based buffer overflow in the subnet-mask handling of dhclient. Impact : A remote attacker might set up a...