CVE-2004-1006 Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
HighCVSS 10.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcpd | = 2.0.pl5 | No fix listed |
| isc dhcpd | = 3.0 | No fix listed |
| isc dhcpd | = 3.0-rc12 | No fix listed |
| isc dhcpd | = 3.0-rc4 | No fix listed |
| isc dhcpd | = 3.0.1-rc1 | No fix listed |
| isc dhcpd | = 3.0.1-rc10 | No fix listed |
| isc dhcpd | = 3.0.1-rc11 | No fix listed |
| isc dhcpd | = 3.0.1-rc12 | No fix listed |
| isc dhcpd | = 3.0.1-rc13 | No fix listed |
| isc dhcpd | = 3.0.1-rc14 | No fix listed |
| isc dhcpd | = 3.0.1-rc2 | No fix listed |
| isc dhcpd | = 3.0.1-rc3 | No fix listed |
| isc dhcpd | = 3.0.1-rc4 | No fix listed |
| isc dhcpd | = 3.0.1-rc5 | No fix listed |
| isc dhcpd | = 3.0.1-rc6 | No fix listed |
| isc dhcpd | = 3.0.1-rc7 | No fix listed |
| isc dhcpd | = 3.0.1-rc8 | No fix listed |
| isc dhcpd | = 3.0.1-rc9 | No fix listed |
| isc dhcpd | = 3.0_b2pl9 | No fix listed |
| isc dhcpd | = 3.0_b2pl23 | No fix listed |
| isc dhcpd | = 3.0_pl1 | No fix listed |
| isc dhcpd | = 3.0_pl2 | No fix listed |
References
- 20041025 debian dhcpd, old format string bug mailing-list
- 20041102 Re: debian dhcpd, old format string bug mailing-list
- 20041105 Re: debian dhcpd, old format string bug mailing-list
- DSA-584 patch vendor-advisory
- VU#448384 third-party-advisory us-government-resource
- RHSA-2005:212 vendor-advisory
- 11591 patch vdb-entry vendor-advisory
- dhcp-log-format-string(17963) vdb-entry