FreeBSD : isc-dhcp-client -- dhclient does not strip or escape shell meta-characters (7e69f00d-632a-11e0-9f3a-001d092480a4)

ISC reports : ISC dhclient did not strip or escape certain shell meta-characters in responses from the dhcp server like hostname before passing the responses on to dhclient-script. Depending on the script and OS, this can result in execution of exploit code on the client. %NASLMINLEVEL 70300 C...

DSA-2217-1 dhcp3 - missing input sanitizing

Bulletin has no description...

dhclient, dhcp, libdhcp4client security update

CentOS Errata and Security Advisory CESA-2011:0428 Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

DHCP client allows shell command injection !

The Internet System Consortium's ISC open source DHCP client dhclient allows DHCP servers to inject commands which could allow an attacker to obtain root privileges. The problem is caused by incorrect filtering of metadata in server response fields. By using crafted host names, and depending on t...

xrdb -- root hole via rogue hostname

Matthias Hopf reports: By crafting hostnames with shell escape characters, arbitrary commands can be executed in a root environment when a display manager reads in the resource database via xrdb. These specially crafted hostnames can occur in two environments: Systems are affected are: systems se...

[SECURITY] Fedora 14 Update: dhcp-4.2.0-19.P2.fc14

DHCP Dynamic Host Configuration Protocol is a protocol which allows individual devices on an IP network to get their own network configuration information IP address, subnetmask, broadcast address, etc. from a DHCP server. The overall purpose of DHCP is to make it easier to administer a large...

Ubuntu: Security Advisory (USN-1037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 10.10 : ifupdown update (USN-1037-1)

Under certain circumstances, the DHCP client could start before its AppArmor profile was loaded and therefore run unconfined. This update ensures the AppArmor profile is loaded before DHCP client starts. Note that Tenable Network Security has extracted the preceding description block directly fro...

USN-1037-1: ifupdown update

Under certain circumstances, the DHCP client could start before its AppArmor profile was loaded and therefore run unconfined. This update ensures the AppArmor profile is loaded before DHCP client starts...

Debian DSA-1833-1 : dhcp3 - several vulnerabilities

Several remote vulnerabilities have been discovered in ISC's DHCP implementation : - CVE-2009-0692 It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution. - CVE-2009-1892 Christoph Biedl...

MDVA-2010:073 : dhcp

The DHCP client ignores the interface-mtu option set by server. This update fixes the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

Mandriva Update for dhcp MDVA-2010:073 (dhcp)

Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVA-2010:073 dhcp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Microsoft Windows DHCP Client Service Buffer Overflow (MS06-036; CVE-2006-2372)

Microsoft Windows DHCP Client service is a client side implementation of the Dynamic Host Configuration Protocol DHCP, which allows remote and automated management of network settings of operating systems. The DHCP Client Service is distributed with all versions of the Windows operating system an...

VMware Mega Patch Plugs Security Holes

Virtualization software specialist VMware has shipped a massive batch of critical security updates to cover 48 security holes in a wide range of its server and workstation products. According to an advisory from VMWare, the vulnerabilities affect the DHCP Server,DHCP Client, Service Console kerne...

SLES10: Security update for dhclient

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp dhcp-client dhcp-devel dhcp-relay dhcp-server More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the...

SLES10: Security update for dhclient

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp dhcp-client dhcp-devel dhcp-relay dhcp-server More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES11: Security update for dhcp-client

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp-client More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/...

SLES11: Security update for dhcp-client

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp-client More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 20...

SLES9: Security update for dhcp-client

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp-client For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5053652 within the...

SLES9: Security update for dhcp-client

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dhcp-client For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5053652 within the...