5452 matches found
CVE-2002-0758
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file...
CVE-2002-0702
Format string vulnerabilities in the logging routines for dynamic DNS code print.c of ISC DHCP daemon DHCPD 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response...
CVE-2002-0702
ISC DHCPD (dhcpd) versions 3 through 3.0.1rc8, with NSUPDATE enabled, contain a format string vulnerability in the logging code (print.c) that can allow remote DNS servers to execute arbitrary code via crafted DNS responses. The vulnerability is in the dynamic DNS update path and logging of updat...
CVE-2002-0702
Format string vulnerabilities in the logging routines for dynamic DNS code print.c of ISC DHCP daemon DHCPD 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response...
CVE-2002-0601
ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service crash via malformed DHCP packets that cause RealSecure to dereference a null pointer...
External access to Netgear RP114 "firewall"
The NetGear Web Safe Router RP114 with current firmware 3.26 is vulnerable in its default configuration. The router acts as a DHCP server for LAN clients and as a DHCP client on the external side. The IP address 192.168.0.1 is meant for local access, as DHCP server, DNS proxy, default gateway and...
Security Advisory: CBOS - Improving Resilience to DoS Attacks
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: CBOS - Improving Resilience to Denial-of-Service Attacks ========================================================================= Revision 1.0 For Public Release 2002 May 23 16:00 UTC+0000 -...
Remote code execution via SuSE sysconfig
Invalid usage of DHCP client allows command execution by spoofing DHCP server reply...
Format string bug in ISC dhcpd
Format string on syslog call in NSUPDATE functionality...
SuSE Security Announcement: sysconfig (SuSE-SA:2002:016)
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: sysconfig Announcement-ID: SuSE-SA:2002:016 Date: Wed May 8 12:00:00 MEST 2002 Affected products: 8.0 Vulnerability Type: remote command execution Severity 1-10: 4 SuSE default package: Yes. Other affected systems: No. Content...
ISC DHCPD contains format string vulnerability when logging DNS-update requests
Overview The DHCP daemon DHCPD is a server that is used to allocate network addresses and assign configuration parameters to dynamically configured hosts. A format string vulnerability may permit an intruder to execute code with the privileges of the DHCP daemon typically root. Description The...
ISS Advisory: Remote Denial of Service Vulnerability in RealSecure Network Sensor
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
ISS RealSecure DHCP DoS
It's possible to reference NULL pointer by malcrafted DHCP packet...
CVE-1999-1407
ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file...
CVE-1999-1407
CVE-1999-1407 affects the ifdhcpc-done script used for configuring DHCP on Red Hat Linux 5. The vulnerability arises from a symlink attack against the dhcplog file, allowing local users to append text to arbitrary files. The provided sources describe the vulnerability and impact (local, partial i...
CVE-1999-0808
Multiple buffer overflows in ISC DHCP Distribution server dhcpd 1.0 and 2.0 allow a remote attacker to cause a denial of service crash and possibly execute arbitrary commands via long options...
CVE-1999-0808
CVE-1999-0808 highlights multiple buffer overflows in ISC DHCP Distribution server (dhcpd) versions 1.0 and 2.0. The root cause, as documented, is unsafe handling of long options, which can be exploited by a remote attacker to cause a crash and potentially execute arbitrary commands. Affected com...
DHCP Server Detection
This script contacts the remote DHCP server if any and attempts to retrieve information about the network layout. Some DHCP servers provide sensitive information such as the NIS domain name, or network layout information such as the list of the network web servers, and so on. It does not...