CVE

Id
8888  
CVE No.
CVE-2004-0460  
Status
Candidate  
Description
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.  
Phase
Assigned (20040512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56747 8888 CVE-2004-0460 BUGTRAQ:20040628 ISC DHCP overflows  View
56748 8888 CVE-2004-0460 URL:http://marc.info/?l=bugtraq&m=108843959502356&w=2  View
56749 8888 CVE-2004-0460 CONFIRM:http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf  View
56750 8888 CVE-2004-0460 MANDRAKE:MDKSA-2004:061  View
56751 8888 CVE-2004-0460 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:061  View
56752 8888 CVE-2004-0460 CERT:TA04-174A  View
56753 8888 CVE-2004-0460 URL:http://www.us-cert.gov/cas/techalerts/TA04-174A.html  View
56754 8888 CVE-2004-0460 CERT-VN:VU#317350  View
56755 8888 CVE-2004-0460 URL:http://www.kb.cert.org/vuls/id/317350  View
56756 8888 CVE-2004-0460 BUGTRAQ:20040622 DHCP Vuln // no code 0day //  View
56757 8888 CVE-2004-0460 URL:http://marc.info/?l=bugtraq&m=108795911203342&w=2  View
56758 8888 CVE-2004-0460 SUSE:SuSE-SA:2004:019  View
56759 8888 CVE-2004-0460 URL:http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html  View
56760 8888 CVE-2004-0460 BUGTRAQ:20040708 [OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd)  View
56761 8888 CVE-2004-0460 URL:http://marc.info/?l=bugtraq&m=108938625206063&w=2  View
56762 8888 CVE-2004-0460 BID:10590  View
56763 8888 CVE-2004-0460 URL:http://www.securityfocus.com/bid/10590  View
56764 8888 CVE-2004-0460 SECUNIA:23265  View
56765 8888 CVE-2004-0460 URL:http://secunia.com/advisories/23265  View
56766 8888 CVE-2004-0460 XF:dhcp-ascii-log-bo(16475)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63260 JVNDB-2004-000617 ISC DHCP 3 に複数の脆弱性 Internet Software Consortium (ISC) が提供している Dynamic Host Configuration Protocol Daemon (DHCPD) バージョン 3 には、バッファオーバーフローに関わる 2 つの脆弱性が存在します。 CVE-2004-0461 8888 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000617.html  View