[Forgot Password]
Login  Register Subscribe

23631

 
 

119495

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1833-2 dhcp3 -- several

ID: oval:org.secpod.oval:def:600373Date: (C)2011-05-13   (M)2017-11-27
Class: PATCHFamily: unix




The previous dhcp3 update did not properly apply the required changes to the stable version. The old stable version is not affected by this problem. The original advisory description follows. Several remote vulnerabilities have been discovered in ISC"s DHCP implementation: It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution. Christoph Biedl discovered that the DHCP server may terminate when receiving certain well-formed DHCP requests, provided that the server configuration mixes host definitions using "dhcp-client-identifier" and "hardware ethernet". This vulnerability only affects the lenny versions of dhcp3-server and dhcp3-server-ldap. For the stable distribution , this problem has been fixed in version 3.1.1-6+lenny3. We recommend that you upgrade your dhcp3 packages.

Platform:
Debian 5.0
Product:
dhcp3
Reference:
DSA-1833-2
CVE-2009-0692
CVE-2009-1892
CVE    2
CVE-2009-0692
CVE-2009-1892
CPE    1
cpe:/o:debian:debian_linux:5.x

© 2013 SecPod Technologies