The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic.

Overview ISS RealSecure Network Sensor "informational signatures" fail to properly process certain types of DHCP traffic, thereby causing the sensor to crash. Description The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic. If the sensor processes certain typ...

ISC "dhcrelay" fails to limit hop count when malicious bootp packet is received

Overview A vulnerability in the Internet Software Consortium's "dhcrelay" makes it possible for a remote attacker to use dhcrelay to launch a denial-of-service attack against a victim dhcp server. Description The Internet Software Consortium ISC produces a "freely redistributable reference...

CVE-2003-0026

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname...

CVE-2002-1403

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script...

DSA-231 dhcp3 - stack overflows

Bulletin has no description...

CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library Original release date: January 15, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running ISC DHCPD versions...

ISC DHCPD NSUPDATE MiniRes Library Remote Buffer Overflow Vulnerabilities

Description Multiple buffer overflow vulnerabilities have been reported for the ISC DHCPD service. The vulnerability occurs when the DHCP server is configured to dynamically update records. The vulnerability exists in the library used by NSUPDATE to resolve hostnames. An attacker can exploit thes...

DSA-219 dhcpcd - remote command execution

Simon Kelly discovered a vulnerability in dhcpcd, an RFC2131 and RFC1541 compliant DHCP client daemon, that runs with root privileges on client machines. A malicious administrator of the regular or an untrusted DHCP server may execute any command with root privileges on the DHCP client machine by...

PXE server DoS

Corrupted DHCP packet crashes the server...

Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Preboot eXecution Environment PXE server denial-of-service attacks Advisory number: CSSA-2002-044.0 Issue date: 2002 November 11 Cross...

CVE-2002-1071

ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services crash via a TCP packet with both the SYN and ACK flags set...

CVE-2002-0886

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service hang or memory consumption via 1 a large packet to the DHCP port, 2 a large packet to the Telnet port, or 3 a flood of large packets to the CPE, which causes the TCP/IP stack to consume large...

CVE-2002-0835

Preboot eXecution Environment PXE server allows remote attackers to cause a denial of service crash via certain DHCP packets from Voice-Over-IP VOIP phones...

CVE-2002-1069

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...

CVE-2002-0929

Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service reboot via long DHCP requests...

CVE-2002-1069

The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...

CVE-2002-1071

ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services crash via a TCP packet with both the SYN and ACK flags set...

CVE-2002-0929

Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service reboot via long DHCP requests...

CVE-2002-0929

CVE-2002-0929 describes a buffer overflow in the DHCP server of NetWare 6.0 SP1 that allows remote attackers to cause a denial of service (reboot) by sending long DHCP requests. The affected component is the DHCP server on NetWare 6.0 SP1; the underlying cause is a buffer overflow vulnerability. ...

Important: Red Hat Security Advisory: : PXE server crashes from certain DHCP packets

Updated PXE packages are now available for Red Hat Linux which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PXE server. It was...