5647 matches found
CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library Original release date: January 15, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running ISC DHCPD versions...
ISC DHCPD NSUPDATE MiniRes Library Remote Buffer Overflow Vulnerabilities
Description Multiple buffer overflow vulnerabilities have been reported for the ISC DHCPD service. The vulnerability occurs when the DHCP server is configured to dynamically update records. The vulnerability exists in the library used by NSUPDATE to resolve hostnames. An attacker can exploit thes...
DSA-219 dhcpcd - remote command execution
Simon Kelly discovered a vulnerability in dhcpcd, an RFC2131 and RFC1541 compliant DHCP client daemon, that runs with root privileges on client machines. A malicious administrator of the regular or an untrusted DHCP server may execute any command with root privileges on the DHCP client machine by...
PXE server DoS
Corrupted DHCP packet crashes the server...
Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks
To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Preboot eXecution Environment PXE server denial-of-service attacks Advisory number: CSSA-2002-044.0 Issue date: 2002 November 11 Cross...
CVE-2002-1069
The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...
CVE-2002-0835
Preboot eXecution Environment PXE server allows remote attackers to cause a denial of service crash via certain DHCP packets from Voice-Over-IP VOIP phones...
CVE-2002-0929
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service reboot via long DHCP requests...
CVE-2002-0886
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service hang or memory consumption via 1 a large packet to the DHCP port, 2 a large packet to the Telnet port, or 3 a flood of large packets to the CPE, which causes the TCP/IP stack to consume large...
CVE-2002-1071
ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services crash via a TCP packet with both the SYN and ACK flags set...
CVE-2002-1069
The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages 1 release.htm, 2 Device Status, or 3 Device Information...
CVE-2002-0929
CVE-2002-0929 describes a buffer overflow in the DHCP server of NetWare 6.0 SP1 that allows remote attackers to cause a denial of service (reboot) by sending long DHCP requests. The affected component is the DHCP server on NetWare 6.0 SP1; the underlying cause is a buffer overflow vulnerability. ...
CVE-2002-0929
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service reboot via long DHCP requests...
CVE-2002-1071
ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services crash via a TCP packet with both the SYN and ACK flags set...
Important: Red Hat Security Advisory: : PXE server crashes from certain DHCP packets
Updated PXE packages are now available for Red Hat Linux which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PXE server. It was...
CVE-2002-0758
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file...
CVE-2002-0702
Format string vulnerabilities in the logging routines for dynamic DNS code print.c of ISC DHCP daemon DHCPD 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response...
CVE-2002-0702
ISC DHCPD (dhcpd) versions 3 through 3.0.1rc8, with NSUPDATE enabled, contain a format string vulnerability in the logging code (print.c) that can allow remote DNS servers to execute arbitrary code via crafted DNS responses. The vulnerability is in the dynamic DNS update path and logging of updat...
CVE-2002-0702
Format string vulnerabilities in the logging routines for dynamic DNS code print.c of ISC DHCP daemon DHCPD 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response...