Cisco ASA fails to properly process DHCP relay packets

Overview The Cisco Adaptive Security Appliance contains a memory exhaustion vulnerability that may occur when the DHCP service relay is enabled. Description The Cisco Adaptive Security Appliance ASA is firewall that includes routing and intrusion prevention system IPS features. DHCP relay allows...

CVE-2007-1692

The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol WPAD without static WPAD entries, which might allow remote attackers to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as demonstrated using Internet...

Privilege escalation

The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol WPAD without static WPAD entries, which might allow remote attackers to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as demonstrated using Internet...

CVE-2007-1692

The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol WPAD without static WPAD entries, which might allow remote attackers to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as demonstrated using Internet...

CVE-2006-5817

prldhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions 0666 for /Library/Parallels/.dhcpdconfiguration, which allows local users to modify DHCP configuration...

CVE-2006-5817

prldhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions 0666 for /Library/Parallels/.dhcpdconfiguration, which allows local users to modify DHCP configuration...

CVE-2006-5817

The CVE-2006-5817 entry concerns Parallels Desktop for Mac Build 1940, where the prl_dhcpd service stores DHCP configuration in /Library/Parallels/.dhcpd_configuration with insecure permissions (0666). This permits local users to modify the DHCP configuration, representing a local-impact vulnerab...

ISC DHCP Server supersede_lease()远程拒绝服务漏洞

ISC DHCP是一款动态主机配置协议服务器软件。 ISC DHCP服务器在处理畸形请求时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击，导致DHCP服务器崩溃。 ISC DHCP软件memory.c中的supersedelease函数在处理DHCPOFFER报文中的选项时存在问题，远程攻击者可以通过一个32字节长的客户端标志选项字段导致服务器崩溃。 ISC DHCPD 2.x ISC DHCP 3.x版本的软件不受此漏洞影响，请到厂商的网站下载： http://www.isc.org/products/DHCP/...

Hawking Technology wireless router WR254-CA DNS issue

Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...

Debian DSA-1143-1 : dhcp - programming error

Justin Winschief and Andrew Steets discovered a bug in dhcp, the DHCP server for automatic IP address assignment, which causes the server to unexpectedly exit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Wireshark contains an unspecified vulnerability in the DHCP dissector

Overview Wireshark contains a vulnerability in the DHCP dissector that may cause a denial-of-service condition. Description Wireshark for Microsoft Windows contains a vulnerability in the DHCP dissector that may cause a denial-of-service condition. This vulnerability may be exploited when the...

CVE-2006-4983

CVE-2006-4983 affects Cisco NAC. Description: quarantined devices can tunnel traffic through DNS, DHCP, or EAPoUDP, bypassing NAC enforcement. Impact per CVSS v2 (base score 7.5, HIGH) indicates potential partial disclosure/integrity/availability risks via a network vector. Connected sources prov...

Update Protection against Microsoft Windows DHCP Remote Code Execution Vulnerability (MS06-036)

Microsoft Windows contains a vulnerability in the way that it processes and logs DHCP messages. The Dynamic Host Configuration Protocol DHCP provides central management of IP addresses and other details related to the IP configuration used on the network. A remote user can exploit this...

CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisoryMicrosoftWindowsDHCPClientServiceRemoteBufferOverflow.pdf This advisory contains the full-detailed information regarding the...

Microsoft Windows DHCP client buffer overflow

Buffer overflow on DHCP server response parsing...

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

CVE-2006-4332

Technical details for CVE-2006-4332 are not publicly disclosed in the provided connected documents. The OpenVAS/Gentoo/SUSE entries reference the vulnerability in Wireshark/Ethereal but do not include affected versions, exploit vectors, root cause, or fixes. Monitor for updates.

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...