CVE-2003-0026 Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute a...
HighCVSS 7.5
EPSS 18.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcpd | = 3.0 | No fix listed |
| isc dhcpd | = 3.0.1-rc1 | No fix listed |
| isc dhcpd | = 3.0.1-rc2 | No fix listed |
| isc dhcpd | = 3.0.1-rc3 | No fix listed |
| isc dhcpd | = 3.0.1-rc4 | No fix listed |
| isc dhcpd | = 3.0.1-rc5 | No fix listed |
| isc dhcpd | = 3.0.1-rc6 | No fix listed |
| isc dhcpd | = 3.0.1-rc7 | No fix listed |
| isc dhcpd | = 3.0.1-rc8 | No fix listed |
References
- 20030122 [securityslackware.com: [slackware-security] New DHCP packages available] mailing-list
- CLA-2003:562 vendor-advisory
- CA-2003-01 patch third-party-advisory us-government-resource
- N-031 government-resource third-party-advisory
- DSA-231 patch vendor-advisory
- VU#284857 patch third-party-advisory us-government-resource
- MDKSA-2003:007 vendor-advisory
- OpenPKG-SA-2003.002 vendor-advisory
- RHSA-2003:011 patch vendor-advisory
- 6627 vdb-entry
- 1005924 vdb-entry
- SuSE-SA:2003:006 vendor-advisory
- dhcpd-minires-multiple-bo(11073) vdb-entry