SuSE 10 Security Update : dhcp (ZYPP Patch Number 7717)

This update of dhcp fixes two Denial of Service CVE-2011-2748 / CVE-2011-2749 vulnerabilities caused by specially crafted BOOTP packets. Additionally, the alias IP address handling of dhclient-script was fixed to not wipe out iptables connmark when renewing the lease. %NASLMINLEVEL 70300 C Tenabl...

CentOS Update for dhclient CESA-2011:1160 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for dhclient CESA-2011:1160 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for dhclient CESA-2011:1160 centos4 i386

Check for the Version of dhclient OpenVAS Vulnerability Test CentOS Update for dhclient CESA-2011:1160 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ISC DHCP dhclient Network Configuration Script Command Injection (CVE-2011-0997)

A command injection vulnerability has been reported in ISC DHCP dhclient. The Dynamic Host Configuration Protocol DHCP protocol is used to centrally manage and automate IP addresses assignment on a network. The vulnerability is due to an input validation issue in dhclient when parsing crafted...

CentOS Update for dhclient CESA-2009:1154 centos3 i386

Check for the Version of dhclient OpenVAS Vulnerability Test CentOS Update for dhclient CESA-2009:1154 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for dhclient CESA-2011:0428 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for dhclient CESA-2009:1154 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu 9.10 / 10.04 LTS / 10.10 : dhcp3 vulnerability (USN-1108-2)

USN-1108-1 fixed vulnerabilities in DHCP. Due to an error, the patch to fix the vulnerability was not properly applied on Ubuntu 9.10 and higher. This update fixes the problem. Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use thi...

Debian Security Advisory DSA 2217-1 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory DSA 2217-1. OpenVAS Vulnerability Test $Id: deb22171.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2217-1 dhcp3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

[SECURITY] [DSA 2216-1] isc-dhcp security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2216-1 [email protected] http://www.debian.org/security/ Nico Golde April 10, 2011 http://www.debian.org/security/faq -...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : dhcp3 vulnerability (USN-1108-1)

Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use this flaw with a malicious DHCP server to execute arbitrary code, resulting in root privilege escalation. Note that Tenable Network Security has extracted the preceding description...

RHEL 6 : dhcp (RHSA-2011:0428)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0428 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...

CentOS Update for dhclient CESA-2011:0428 centos4 i386

Check for the Version of dhclient OpenVAS Vulnerability Test CentOS Update for dhclient CESA-2011:0428 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

FreeBSD : isc-dhcp-client -- dhclient does not strip or escape shell meta-characters (7e69f00d-632a-11e0-9f3a-001d092480a4)

ISC reports : ISC dhclient did not strip or escape certain shell meta-characters in responses from the dhcp server like hostname before passing the responses on to dhclient-script. Depending on the script and OS, this can result in execution of exploit code on the client. %NASLMINLEVEL 70300 C...

CentOS Update for dhclient CESA-2011:0428 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA 2216-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2216-1 [email protected] http://www.debian.org/security/ Nico Golde April 10, 2011 http://www.debian.org/security/faq -...

DSA-2216-1 isc-dhcp - missing input sanitizing

Bulletin has no description...

DEBIAN-CVE-2011-0997

dhclient in ISC DHCP 3.0.x through 4.2.x before 4.2.1-P1, 3.1-ESV before 3.1-ESV-R1, and 4.1-ESV before 4.1-ESV-R2 allows remote attackers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message, as demonstrated by a hostname that is provided to...

CVE-2011-0997

CVE-2011-0997 affects ISC DHCP dhclient across multiple releases (3.0.x–4.2.x before 4.2.1-P1; 3.1-ESV before 3.1-ESV-R1; 4.1-ESV before 4.1-ESV-R2). The vulnerability arises from insufficient sanitization of certain DHCP options (notably hostname) in server responses, enabling remote attackers t...