CVE-2004-0606

Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...

CVE-2004-0615

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

CVE-2004-1111

The CVE-2004-1111 issue affects Cisco IOS versions including 2.2(18)EW and 12.2(18)S/SE/SV/SW (and others) that run DHCP server/relay without the no service dhcp setting. The bug causes undeliverable DHCP packets to remain in the input queue and may exhaust it, allowing remote attackers to trigge...

CVE-2004-1111

Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...

CVE-2004-1111: Undefined Security Weakness

Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...

Cisco IOS Malformed DHCP Packet DoS (CSCee50294)

The remote router contains a version of IOS which has flaw in the DHCP service/relay service that may let an attacker to disable DHCP serving and or relaying on the remote router. CISCO identifies this vulnerability as bug id CSCee50294. C Tenable Network Security include"compat.inc"; ifdescripti...

CVE-2004-1006

CVE-2004-1006 affects ISC DHCP’s dhcpd (dhcp 2.x). A format-string vulnerability in the logging code (errwarn/calls in log paths) could allow a remote DNS server to trigger arbitrary code execution with the dhcpd’s privileges. Public references (RHSA-2005:212, Debian DSA-584-1, CERT/US-CERT entri...

Cisco IOS DHCP DoS

Malcrafted packet blocks input queue...

Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service =============================================================================== Revision 1.0 For Public Release 2004 November 10 1700 UTC GMT -...

Cisco IOS DHCP Blocked Interface Denial-of-Service

...

Debian DSA-584-1 : dhcp - format string vulnerability

'infamous41md' noticed that the log functions in dhcp 2.x, which is still distributed in the stable Debian release, contained pass parameters to function that use format strings. One use seems to be exploitable in connection with a malicious DNS server. %NASLMINLEVEL 70300 C Tenable Network...

Cisco IOS fails to properly handle malformed DHCP packets

Overview A denial-of-service vulnerability exists in Cisco's Internetwork Operating System IOS. This vulnerability may allow remote attackers to conduct denial-of-service attacks on an affected device. Description The Dynamic Host Configuration Protocol DHCP provides a means for distributing...

isc-dhcpd -- format string vulnerabilities

The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary code with the permissions of the DHCP programs, typically root for the DHCP server...

DHCP format tring bug

Format string bug via DNS name on syslog call...

debian dhcpd, old format string bug

Subject: Debian dhcpd package. http://packages.debian.org/stable/net/dhcp It is vulnerable to the '02 format string bug. http://www.cert.org/advisories/CA-2002-12.html -- -sean...

[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 584-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 584-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2004 http://www.debian.org/security/faq -...

DSA-584-1 dhcp - format string vulnerability

Bulletin has no description...

[Full-Disclosure] 3COM 3crwe754g72-a Administration interface code injection (DHCP)

Title: 3COM 3crwe754g72-a Administration interface code injection Class: Design error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0001 Release Date: 2004-10-18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle...

Debian DSA-219-1 : dhcpcd - remote command execution

Simon Kelly discovered a vulnerability in dhcpcd, an RFC2131 and RFC1541 compliant DHCP client daemon, that runs with root privileges on client machines. A malicious administrator of the regular or an untrusted DHCP server may execute any command with root privileges on the DHCP client machine by...