PT-1999-1364 · Isc · Dhcpd

Publicado 1999-12-31 · Atualizado 2016-10-18 · CVE-1999-0808

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISC DHCP Distribution server (dhcpd) versions 1.0 through 2.0

Description The issue is related to multiple buffer overflows that can be triggered by a remote attacker sending long options to the server. This can cause a denial of service, resulting in the server crashing, and potentially allow the execution of arbitrary commands.

Recommendations For versions 1.0 through 2.0, update to a version that includes a fix for the buffer overflow issues to prevent potential denial of service and arbitrary command execution.

Correção

Identificadores relacionados

CVE-1999-0808

Produtos afetados

Dhcpd

Referências · 4

• ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz · Correção
• http://marc.info/?l=bugtraq&m=90221101925960&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0808 · Nota de Segurança
• http://ciac.llnl.gov/ciac/bulletins/i-053.shtml · Aviso do Fabricante