CVE

Id
5092  
CVE No.
CVE-2002-0702  
Status
Candidate  
Description
Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.  
Phase
Proposed (20020726)  
Votes
ACCEPT(6) Armstrong, Baker, Cole, Cox, Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26778 5092 CVE-2002-0702 BUGTRAQ:20020508 [NGSEC-2002-2] ISC DHCPDv3, remote root compromise  View
26779 5092 CVE-2002-0702 URL:http://marc.info/?l=bugtraq&m=102089498828206&w=2  View
26780 5092 CVE-2002-0702 VULNWATCH:20020508 [VulnWatch] [NGSEC-2002-2] ISC DHCPDv3, remote root compromise  View
26781 5092 CVE-2002-0702 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0063.html  View
26782 5092 CVE-2002-0702 CERT-VN:VU#854315  View
26783 5092 CVE-2002-0702 URL:http://www.kb.cert.org/vuls/id/854315  View
26784 5092 CVE-2002-0702 CERT:CA-2002-12  View
26785 5092 CVE-2002-0702 URL:http://www.cert.org/advisories/CA-2002-12.html  View
26786 5092 CVE-2002-0702 CALDERA:CSSA-2002-028.0  View
26787 5092 CVE-2002-0702 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt  View
26788 5092 CVE-2002-0702 MANDRAKE:MDKSA-2002:037  View
26789 5092 CVE-2002-0702 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-037.php  View
26790 5092 CVE-2002-0702 SUSE:SuSE-SA:2002:019  View
26791 5092 CVE-2002-0702 URL:http://www.novell.com/linux/security/advisories/2002_19_dhcp.html  View
26792 5092 CVE-2002-0702 CONECTIVA:CLA-2002:483  View
26793 5092 CVE-2002-0702 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000483  View
26794 5092 CVE-2002-0702 XF:dhcpd-nsupdate-format-string(9039)  View
26795 5092 CVE-2002-0702 URL:http://www.iss.net/security_center/static/9039.php  View
26796 5092 CVE-2002-0702 BID:4701  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64019 JVNDB-2002-000346 ISC DHCPD にフォーマットストリングの脆弱性 Internet Software Consortium (ISC) が提供している Dynamic Host Configuration Protocol Daemon (DHCPD) バージョン 3.0 から 3.0.1rc8 には、ログの処理にフォーマットストリングの脆弱性があります。 CVE-2002-0702 5092 10 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000346.html  View