OpenBSD DHCP server buffer overflow

Integer overflow with "maximum message size" option leads to buffer overflow...

DSA-1388-3 dhcp - buffer overflow

Bulletin has no description...

USN-531-2: dhcp vulnerability

USN-531-1 fixed vulnerabilities in dhcp. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes the problem. Original advisory details: Nahuel Riva and Gerardo Richarte discovered that the DHCP server did not correctly handle certai...

Debian DSA-1388-3 : dhcp - buffer overflow

The patch used to correct the DHCP server buffer overflow in DSA-1388-1 was incomplete and did not adequately resolve the problem. This update to the previous advisory makes updated packages based on a newer version of the patch available. For completeness, please find below the original advisory...

openSUSE 10 Security Update : dhcp-server (dhcp-server-2435)

A bug was fixed were a LDAP server with malicious data providing information to the DHCP server could crash and potentially execute code as the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Integer overflow

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528...

CVE-2007-0062

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 befor...

CVE-2007-0063

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528...

Design/Logic Flaw

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

CVE-2007-0062

CVE-2007-0062: The vulnerability affects ISC DHCPD 3.0.x (before 3.0.7) and 3.1.x (before 3.1.1), plus the DHCP servers in VMware Workstation/Player, ACE, and related products. It is caused by a stack-based buffer overflow triggered by a malformed DHCP packet with a large dhcp-max-message-size, p...

CVE-2007-0063

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528...

CVE-2007-0061

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

VMWare software multiple security vulnerabilities

Multiple bugs, including remote DHCP server vulnerabilities are fixed...

VMware Workstation 6.0多个安全漏洞

BUGTRAQ ID: 25728,25729,25731,25732 CVECAN ID: CVE-2007-0061,CVE-2007-0062,CVE-2007-0063,CVE-2007-4059,CVE-2007-4155,CVE-2007-4496,CVE-2007-4497 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的实现上存在多个安全漏洞，可导致多种威胁。 具体如下： 1 VMWare的DHCP服务器可被恶意网页用来获取系统权限。 2...

ISC DHCP Server supersede_lease()远程拒绝服务漏洞

ISC DHCP是一款动态主机配置协议服务器软件。 ISC DHCP服务器在处理畸形请求时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击，导致DHCP服务器崩溃。 ISC DHCP软件memory.c中的supersedelease函数在处理DHCPOFFER报文中的选项时存在问题，远程攻击者可以通过一个32字节长的客户端标志选项字段导致服务器崩溃。 ISC DHCPD 2.x ISC DHCP 3.x版本的软件不受此漏洞影响，请到厂商的网站下载： http://www.isc.org/products/DHCP/...

CVE-2006-3122

The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...

ISC DHCP Server supersede_lease() Function DHCPDISCOVER Packet DoS

The ISC DHCP server running on the remote host is affected by a denial of service vulnerability in the supersedelease function within file memory.c due to improper handling of DHCPDISCOVER packets that have a client-identifier option that is exactly 32 bytes long. An unauthenticated, remote...

dnsmasq DNS forwarder / DHCP server DoS

Crash on parsing malformed DHCP client request...

Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow

Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow source: https://www.securityfocus.com/bid/16298/info Dual DHCP DNS Server is prone to a remote buffer overflow vulnerability. The vulnerability presents itself when the server handles excessive data through the DHCP options field...

FreeBSD : isc-dhcpd -- format string vulnerabilities (ccd325d2-fa08-11d9-bc08-0001020eed82)

The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary code with the permissions of the DHCP programs, typically root for the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...