CVE

Id
8889  
CVE No.
CVE-2004-0461  
Status
Candidate  
Description
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.  
Phase
Assigned (20040512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56767 8889 CVE-2004-0461 BUGTRAQ:20040628 ISC DHCP overflows  View
56768 8889 CVE-2004-0461 URL:http://marc.info/?l=bugtraq&m=108843959502356&w=2  View
56769 8889 CVE-2004-0461 CONFIRM:http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf  View
56770 8889 CVE-2004-0461 MANDRAKE:MDKSA-2004:061  View
56771 8889 CVE-2004-0461 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:061  View
56772 8889 CVE-2004-0461 CERT:TA04-174A  View
56773 8889 CVE-2004-0461 URL:http://www.us-cert.gov/cas/techalerts/TA04-174A.html  View
56774 8889 CVE-2004-0461 CERT-VN:VU#654390  View
56775 8889 CVE-2004-0461 URL:http://www.kb.cert.org/vuls/id/654390  View
56776 8889 CVE-2004-0461 BUGTRAQ:20040622 DHCP Vuln // no code 0day //  View
56777 8889 CVE-2004-0461 URL:http://marc.info/?l=bugtraq&m=108795911203342&w=2  View
56778 8889 CVE-2004-0461 SUSE:SuSE-SA:2004:019  View
56779 8889 CVE-2004-0461 URL:http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html  View
56780 8889 CVE-2004-0461 BUGTRAQ:20040708 [OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd)  View
56781 8889 CVE-2004-0461 URL:http://marc.info/?l=bugtraq&m=108938625206063&w=2  View
56782 8889 CVE-2004-0461 SECUNIA:23265  View
56783 8889 CVE-2004-0461 URL:http://secunia.com/advisories/23265  View
56784 8889 CVE-2004-0461 XF:dhcp-c-include-bo(16476)  View
56785 8889 CVE-2004-0461 URL:http://xforce.iss.net/xforce/xfdb/16476  View
56786 8889 CVE-2004-0461 BID:10591  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63246 JVNDB-2004-000588 SSL-VPN製品におけるCookieの脆弱性 SSL-VPN製品で、SSLのクライアント認証を使用せずに、ユーザ名とパスワードでログインするモードを使用している場合にセッションハイジャックされる可能性があります。 CVE-2004-0462 8889 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000588.html  View