PT-2020-16305 · Open · Open Dhcp Server

Published 2020-10-28 · Updated 2023-02-27 · CVE-2020-26131

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open DHCP Server (Regular) version 1.75 Open DHCP Server (LDAP Based) version 0.1Beta

Description The issue is related to insufficient access restrictions in the default installation directory, allowing an attacker to elevate privileges. This can be achieved by replacing the OpenDHCPServer.exe binary in the Regular version or the OpenDHCPLdap.exe binary in the LDAP Based version.

Recommendations For Open DHCP Server (Regular) version 1.75, restrict access to the default installation directory to prevent unauthorized replacement of the OpenDHCPServer.exe binary. For Open DHCP Server (LDAP Based) version 0.1Beta, restrict access to the default installation directory to prevent unauthorized replacement of the OpenDHCPLdap.exe binary.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-26131

Affected Products

Open Dhcp Server

References · 5

• 🔥 https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26131.md · Exploit
• 🔥 https://github.com/an0ry/advisories · Exploit
• https://osv.dev/vulnerability/CVE-2020-26131 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26131 · Security Note
• https://sourceforge.net/projects/dhcpserver · Note