[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

111017

 
 

909

 
 

86402

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1833-2 dhcp3 -- several

ID: oval:org.secpod.oval:def:600373Date: (C)2011-05-13   (M)2017-11-27
Class: PATCHFamily: unix




The previous dhcp3 update did not properly apply the required changes to the stable version. The old stable version is not affected by this problem. The original advisory description follows. Several remote vulnerabilities have been discovered in ISC"s DHCP implementation: It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution. Christoph Biedl discovered that the DHCP server may terminate when receiving certain well-formed DHCP requests, provided that the server configuration mixes host definitions using "dhcp-client-identifier" and "hardware ethernet". This vulnerability only affects the lenny versions of dhcp3-server and dhcp3-server-ldap. For the stable distribution , this problem has been fixed in version 3.1.1-6+lenny3. We recommend that you upgrade your dhcp3 packages.

Platform:
Debian 5.0
Product:
dhcp3
Reference:
DSA-1833-2
CVE-2009-0692
CVE-2009-1892
CVE    2
CVE-2009-1892
CVE-2009-0692
CPE    1
cpe:/o:debian:debian_linux:5.x

© SecPod Technologies