Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1892
HistoryJul 17, 2009 - 12:00 a.m.

CVE-2009-1892

2009-07-1700:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.073 Low

EPSS

Percentile

94.0%

dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and
hardware ethernet configuration settings are both used, allows remote
attackers to cause a denial of service (daemon crash) via unspecified
requests.

Notes

Author Note
jdstrand POC does not work on Ubuntu 8.04 LTS and earlier, and report states it is only 3.1 and higher requires a somewhat broken configuration to exploit

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.073 Low

EPSS

Percentile

94.0%