5647 matches found
D-LINK 614 DoS
Multiple DHCP processing bugs...
DLINK 614+ - SOHO routers, DHCP service DOS
TITLE: DLINK 614+ - SOHO routers, DHCP service DOS http://www.dlink.com TYPE: signedness bug QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments, utilizing their patented Digital Signal ProcessingTM technology, and D-Link?s...
ISC DHCP buffer overflow
Buffer overflow on oversized hostname in DHCP query, if hostname is splitted to few attributes...
CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...
CVE-2004-0461
The DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of servic...
CVE-2004-0461
ISC DHCPD 3.0.1rc12/rc13 contains two buffer overflow risks: when vsnprintf support is absent, header files map vsnprintf to the unsafe vsprintf, enabling possible DoS (server crash) and potentially arbitrary code execution. The issue affects the DHCP server component in ISC DHCP 3.0.1rc12/rc13 a...
CVE-2004-0460
ISC DHCP 3.0.1rc12 and 3.0.1rc13 are affected by a buffer overflow in the DHCPD logging path when processing multiple hostname options in DISCOVER/OFFER/REQUEST/ACK/NAK, potentially enabling remote code execution and denial of service. The issue stems from long hostname options being concatenated...
CVE-2004-0580
CVE-2004-0580 affects Linksys BEFSR11/BEFSR41/BEFSR81/BEFSRU31 Cable/DSL routers running firmware 1.45.7. The issue is that BOOTP replies do not properly clear previously used buffer contents, enabling remote attackers to obtain sensitive information from memory. The NVD entry notes a network-exp...
CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information...
DLINK 614+, script injection vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Security flaw in DLINK 614+ - SOHO routers http://www.dlink.com TYPE: Script injection over DHCP QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments, utilizing their...
DLink 514 DHCP crossite scripting
Crossite scripting via DHCP request parameters...
US-CERT Technical Cyber Security Alert TA04-174A -- Multiple Vulnerabilities in ISC DHCP 3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-174A Multiple Vulnerabilities in ISC DHCP 3 Original release date: June 22, 2004 Last revised: -- Source: US-CERT Systems Affected ISC DHCP versions 3.0.1rc12 and 3.0.1rc13 Overview Two vulnerabilities in the ISC DH...
dlink614.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Security flaw in DLINK 614+ - SOHO routers http://www.dlink.com TYPE: Script injection over DHCP QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments, utilizing their...
ISC DHCP contains C Includes that define vsnprintf() to vsprintf() creating potential buffer overflow conditions
Overview The Internet Systems Consortium's ISC Dynamic Host Configuration Protocol DHCP 3 application contains a vulnerability that introduces several potential buffer overflow conditions. Exploitation of this vulnerability can cause a denial-of-service condition to the DHCP Daemon DHCPD and may...
isc-dhcp3-server buffer overflow in logging mechanism
A buffer overflow exists in the logging functionality of the DHCP daemon which could lead to Denial of Service attacks and has the potential to allow attackers to execute arbitrary code...
ISC DHCP contains a stack buffer overflow vulnerability in handling log lines containing ASCII characters only
Overview The Internet Systems Consortium's ISC Dynamic Host Configuration Protocol DHCP 3 application contains a buffer overflow vulnerability. Exploitation of this vulnerability can cause a denial of service condition to the DHCP Daemon DHCPD and may permit a remote attacker to execute arbitrary...
D-Link AirPlus DI-614+ DI-624 DI-704 - DHCP Log HTML Injection
D-Link AirPlus DI-614+ DI-624 DI-704 - DHCP Log HTML Injection source: https://www.securityfocus.com/bid/10587/info It is reported that the DI-614+, DI-704, and the DI-624 are susceptible to an HTML injection vulnerability in their DHCP log. An attacker who has access to the wireless, or internal...
D-Link AirPlus DI-614+ / DI-624 / DI-704 - DHCP Log HTML Injection
source: https://www.securityfocus.com/bid/10587/info It is reported that the DI-614+, DI-704, and the DI-624 are susceptible to an HTML injection vulnerability in their DHCP log. An attacker who has access to the wireless, or internal network segments of the router can craft malicious DHCP...
Linksys BEFSR41 DHCP vulnerability server leaks network data
On May 2nd 2004 I sent an email detailed below to Linksys concerning this vulnerability. Linksys has posted the vulnerability and a fix for the Revision 3 router since then here:...