CVE-2004-0900

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."...

CVE-2004-0899

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service application crash via a malformed DHCP message, aka "Logging...

CVE-2004-0900

CVE-2004-0900 pertains to the Windows NT 4.0 DHCP Server, where an unchecked buffer during DHCP message length validation can be exploited by a remote attacker to execute arbitrary code via a malformed DHCP message. The vulnerability is part of MS04-042 (DHCP vulnerabilities) and affects Windows ...

Multiple Microsoft Windows NT 4.0 DHCP bugs

DoS, buffer overflow...

Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service (885249)

Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service 885249 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use the Microsoft DHCP Server service. Impact of Vulnerability: Remote Code Executi...

Microsoft Windows DHCP Server Remote Buffer Overflow Vulnerability

Description Microsoft Windows DHCP server on NT 4 server platforms is reported susceptible to a remote buffer overflow vulnerability. This issue is due to insufficient bounds checking of user-supplied network data. This vulnerability allows remote attackers to execute arbitrary code in the contex...

Microsoft Windows DHCP Server Logging Remote Denial Of Service Vulnerability

Description Microsoft Windows DHCP server on NT 4 server platforms is reported susceptible to a remote denial of service vulnerability in its logging functionality. This issue is due to a failure of the application to properly handle user-supplied network input. This vulnerability allows remote...

MS04-042: Windows NT Multiple DHCP Vulnerabilities (885249)

The remote host has the Windows DHCP server installed. There is a flaw in the remote version of this server that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15965;...

CVE-2004-0615

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

CVE-2004-0606

Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...

CVE-2004-1111

The CVE-2004-1111 issue affects Cisco IOS versions including 2.2(18)EW and 12.2(18)S/SE/SV/SW (and others) that run DHCP server/relay without the no service dhcp setting. The bug causes undeliverable DHCP packets to remain in the input queue and may exhaust it, allowing remote attackers to trigge...

CVE-2004-1111

Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...

Cisco IOS Malformed DHCP Packet DoS (CSCee50294)

The remote router contains a version of IOS which has flaw in the DHCP service/relay service that may let an attacker to disable DHCP serving and or relaying on the remote router. CISCO identifies this vulnerability as bug id CSCee50294. C Tenable Network Security include"compat.inc"; ifdescripti...

CVE-2004-1006

CVE-2004-1006 affects ISC DHCP’s dhcpd (dhcp 2.x). A format-string vulnerability in the logging code (errwarn/calls in log paths) could allow a remote DNS server to trigger arbitrary code execution with the dhcpd’s privileges. Public references (RHSA-2005:212, Debian DSA-584-1, CERT/US-CERT entri...

Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service =============================================================================== Revision 1.0 For Public Release 2004 November 10 1700 UTC GMT -...

Cisco IOS DHCP DoS

Malcrafted packet blocks input queue...

Cisco IOS DHCP Blocked Interface Denial-of-Service

...

Debian DSA-584-1 : dhcp - format string vulnerability

'infamous41md' noticed that the log functions in dhcp 2.x, which is still distributed in the stable Debian release, contained pass parameters to function that use format strings. One use seems to be exploitable in connection with a malicious DNS server. %NASLMINLEVEL 70300 C Tenable Network...

Cisco IOS fails to properly handle malformed DHCP packets

Overview A denial-of-service vulnerability exists in Cisco's Internetwork Operating System IOS. This vulnerability may allow remote attackers to conduct denial-of-service attacks on an affected device. Description The Dynamic Host Configuration Protocol DHCP provides a means for distributing...

isc-dhcpd -- format string vulnerabilities

The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary code with the permissions of the DHCP programs, typically root for the DHCP server...