CVE

Id
6855  
CVE No.
CVE-2003-0026  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.  
Phase
Modified (20071129)  
Votes
ACCEPT(4) Baker, Cole, Cox, Wall | MODIFY(1) Frech | NOOP(1) Christey  
Comments
Frech> XF:dhcpd-minires-multiple-bo(11073) | Christey> MANDRAKE:MDKSA-2003:007 | URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:007 | SUSE:SUSE-SA:2003:0006 | URL:http://www.suse.de/de/security/2003_006_dhcp.html | | Since the SuSE advisory name is "malformed" according to | SuSE"s own convention, make sure that "SuSE-SA:2003:006" is in | the keywords for this CAN.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
38938 6855 CVE-2003-0026 CONECTIVA:CLA-2003:562  View
38939 6855 CVE-2003-0026 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562  View
38940 6855 CVE-2003-0026 DEBIAN:DSA-231  View
38941 6855 CVE-2003-0026 URL:http://www.debian.org/security/2003/dsa-231  View
38942 6855 CVE-2003-0026 MANDRAKE:MDKSA-2003:007  View
38943 6855 CVE-2003-0026 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:007  View
38944 6855 CVE-2003-0026 OPENPKG:OpenPKG-SA-2003.002  View
38945 6855 CVE-2003-0026 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.002.html  View
38946 6855 CVE-2003-0026 REDHAT:RHSA-2003:011  View
38947 6855 CVE-2003-0026 URL:http://www.redhat.com/support/errata/RHSA-2003-011.html  View
38948 6855 CVE-2003-0026 SUSE:SuSE-SA:2003:0006  View
38949 6855 CVE-2003-0026 URL:http://www.suse.com/de/security/2003_006_dhcp.html  View
38950 6855 CVE-2003-0026 BUGTRAQ:20030122 [securityslackware.com: [slackware-security] New DHCP packages available]  View
38951 6855 CVE-2003-0026 URL:http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html  View
38952 6855 CVE-2003-0026 SUSE:SuSE-SA:2003:006  View
38953 6855 CVE-2003-0026 URL:http://www.suse.com/de/security/2003_006_dhcp.html  View
38954 6855 CVE-2003-0026 CERT:CA-2003-01  View
38955 6855 CVE-2003-0026 URL:http://www.cert.org/advisories/CA-2003-01.html  View
38956 6855 CVE-2003-0026 CERT-VN:VU#284857  View
38957 6855 CVE-2003-0026 URL:http://www.kb.cert.org/vuls/id/284857  View
38958 6855 CVE-2003-0026 CIAC:N-031  View
38959 6855 CVE-2003-0026 URL:http://www.ciac.org/ciac/bulletins/n-031.shtml  View
38960 6855 CVE-2003-0026 BID:6627  View
38961 6855 CVE-2003-0026 URL:http://www.securityfocus.com/bid/6627  View
38962 6855 CVE-2003-0026 SECTRACK:1005924  View
38963 6855 CVE-2003-0026 URL:http://www.securitytracker.com/id?1005924  View
38964 6855 CVE-2003-0026 XF:dhcpd-minires-multiple-bo(11073)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63286 JVNDB-2003-000012 Sun KCMS ライブラリサービスにおける任意のファイルの読み込みが可能な脆弱性 kcms_server の引数として渡されるファイル名に対するチェックが不適切であるため、本来許可されていないファイルを読み込んでしまう脆弱性が存在します。 CVE-2003-0027 6855 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000012.html  View