CVE Vulnerabilities

CVE-2003-0026

Published: Jan 17, 2003 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Affected Software

Name Vendor Start Version End Version
Dhcpd Isc 3.0 3.0
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1
Dhcpd Isc 3.0.1 3.0.1

References