CVE-2006-5817

The CVE-2006-5817 entry concerns Parallels Desktop for Mac Build 1940, where the prl_dhcpd service stores DHCP configuration in /Library/Parallels/.dhcpd_configuration with insecure permissions (0666). This permits local users to modify the DHCP configuration, representing a local-impact vulnerab...

ISC DHCP Server supersede_lease()远程拒绝服务漏洞

ISC DHCP是一款动态主机配置协议服务器软件。 ISC DHCP服务器在处理畸形请求时存在漏洞，远程攻击者可能利用此漏洞对服务器执行拒绝服务攻击，导致DHCP服务器崩溃。 ISC DHCP软件memory.c中的supersedelease函数在处理DHCPOFFER报文中的选项时存在问题，远程攻击者可以通过一个32字节长的客户端标志选项字段导致服务器崩溃。 ISC DHCPD 2.x ISC DHCP 3.x版本的软件不受此漏洞影响，请到厂商的网站下载： http://www.isc.org/products/DHCP/...

Hawking Technology wireless router WR254-CA DNS issue

Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...

Debian DSA-1143-1 : dhcp - programming error

Justin Winschief and Andrew Steets discovered a bug in dhcp, the DHCP server for automatic IP address assignment, which causes the server to unexpectedly exit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Wireshark contains an unspecified vulnerability in the DHCP dissector

Overview Wireshark contains a vulnerability in the DHCP dissector that may cause a denial-of-service condition. Description Wireshark for Microsoft Windows contains a vulnerability in the DHCP dissector that may cause a denial-of-service condition. This vulnerability may be exploited when the...

CVE-2006-4983

CVE-2006-4983 affects Cisco NAC. Description: quarantined devices can tunnel traffic through DNS, DHCP, or EAPoUDP, bypassing NAC enforcement. Impact per CVSS v2 (base score 7.5, HIGH) indicates potential partial disclosure/integrity/availability risks via a network vector. Connected sources prov...

Update Protection against Microsoft Windows DHCP Remote Code Execution Vulnerability (MS06-036)

Microsoft Windows contains a vulnerability in the way that it processes and logs DHCP messages. The Dynamic Host Configuration Protocol DHCP provides central management of IP addresses and other details related to the IP configuration used on the network. A remote user can exploit this...

Microsoft Windows DHCP client buffer overflow

Buffer overflow on DHCP server response parsing...

CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisoryMicrosoftWindowsDHCPClientServiceRemoteBufferOverflow.pdf This advisory contains the full-detailed information regarding the...

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

CVE-2006-4332

Technical details for CVE-2006-4332 are not publicly disclosed in the provided connected documents. The OpenVAS/Gentoo/SUSE entries reference the vulnerability in Wireshark/Ethereal but do not include affected versions, exploit vectors, root cause, or fixes. Monitor for updates.

CVE-2006-4332

Unspecified vulnerability in the DHCP dissector in Wireshark formerly Ethereal 0.10.13 through 0.99.2, when run on Windows, allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a bug in Glib...

Multiple problems in Wireshark (Ethereal®) versions 0.7.9 to 0.99.2

Summary Name: Multiple problems in Wireshark Ethereal® versions 0.7.9 to 0.99.2 Docid: wnpa-sec-2006-02 Date: August 23, 2006 Versions affected: 0.7.9 up to and including 0.99.2 Details Description Wireshark 0.99.3 fixes the following vulnerabilities: The SCSI dissector could crash. Versions...

CVE-2006-3122

The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...

CVE-2006-3122

The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...

CVE-2006-3122

The CVE-2006-3122 entry concerns ISC DHCP (dhcpd) 2.0pl5. The vulnerability is in the supersede_lease function (memory.c): processing a DHCPDISCOVER with a 32-byte client-identifier causes the packet to be interpreted as a corrupt uid, making the server exit with a denial-of-service condition. Th...

CVE-2006-3122

The supersedelease function in memory.c in ISC DHCP dhcpd server 2.0pl5 allows remote attackers to cause a denial of service application crash via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with...

[SECURITY] [DSA 1143-1] New dhcp packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1143-1 [email protected] http://www.debian.org/security/ Martin Schulze August 4th, 2006 http://www.debian.org/security/faq -...