DEBIAN-CVE-2005-0876

Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file...

dhcp security update

CentOS Errata and Security Advisory CESA-2005:212-01 An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC...

Moderate: Red Hat Security Advisory: dhcp security update

An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...

RHEL 2.1 : dhcp (RHSA-2005:212)

An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...

GLSA-200504-03 : Dnsmasq: Poisoning and Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200504-03 Dnsmasq: Poisoning and Denial of Service vulnerabilities Dnsmasq does not properly detect that DNS replies received do not correspond to any DNS query that was sent. Rob Holland of the Gentoo Linux Security Audit team al...

Dnsmasq: Poisoning and Denial of Service vulnerabilities

Background Dnsmasq is a lightweight and easily-configurable DNS forwarder and DHCP server. Description Dnsmasq does not properly detect that DNS replies received do not correspond to any DNS query that was sent. Rob Holland of the Gentoo Linux Security Audit team also discovered two off-by-one...

CVE-2005-0876

The CVE-2005-0876 issue: in dnsmasq prior to 2.21, an off-by-one buffer overflow in the DHCP lease file may allow an attacker to execute arbitrary code. Affected product: dnsmasq (pre-2.21). The Slackware security advisory notes upgrading to dnsmasq-2.22 to fix the vulnerability and mentions CAN/...

CVE-2005-0876

Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file...

CVE-2005-0876

Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file...

[SA14691] Dnsmasq DHCP Lease File Denial of Service and DNS Cache Poisoning

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Dnsmasq DHCP Lease File Denial of Service and DNS Cach...

dnsmasq < 2.21.0 Multiple Remote Vulnerabilities

The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...

ISC DHCP contains a format string vulnerabilty in errwarn.c

Overview The Internet Systems Consortium ISC Dynamic Host Configuration Protocol DHCP application contains a format string vulnerability in errwarn.c that could allow an attacker to execute arbitrary code. Description As described in RFC 2131, "The Dynamic Host Configuration Protocol DHCP provide...

DHCP (CAN-2004-0899; CAN-2004-0900)

DHCP Dynamic Host Configuration Protocol is used to administrate IP address configuration. Clients request an IP address from a server that leases them addresses. Attacks on the DHCP protocol usually target a vulnerability in the server software used, by sending specially crafted DHCP packets...

Microsoft Windows DHCP Server Service Denial of Service (CVE-2004-0899; CVE-2004-0900)

...

[SA13992] Sun Solaris DHCP Administration Utilities Vulnerability

TITLE: Sun Solaris DHCP Administration Utilities Vulnerability SECUNIA ADVISORY ID: SA13992 VERIFY ADVISORY: http://secunia.com/advisories/13992/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ DESCRIPTION: A...

CVE-2004-0899

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service application crash via a malformed DHCP message, aka "Logging...

CVE-2004-0900

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."...

CVE-2004-1111

Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...

CVE-2004-1747

Cross-site scripting XSS vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitrary web script or HTML via the DHCP HOSTNAME option...

CVE-2004-0899

CVE-2004-0899 corresponds to a Denial of Service in the Windows NT 4.0 DHCP Server when DHCP Logging is enabled, caused by an unchecked message length. Public documentation and vulnerability scanners (MS04-042, KB885249) indicate a fix exists: install the MS04-042 security update for Windows NT 4...