CVEvulnerability
CVE-2003-0026
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-01-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Affected configurations
• isc dhcpd 3.0
• isc dhcpd 3.0.1
References
- http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html archives.neohapsis.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562 distro.conectiva.com.br
- http://www.cert.org/advisories/CA-2003-01.html Patch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/n-031.shtml www.ciac.org
- http://www.debian.org/security/2003/dsa-231 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/284857 Patch, Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:007 www.mandriva.com
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.002.html www.openpkg.com
- http://www.redhat.com/support/errata/RHSA-2003-011.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/6627 www.securityfocus.com
- http://www.securitytracker.com/id?1005924 www.securitytracker.com
- http://www.suse.com/de/security/2003_006_dhcp.html www.suse.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11073 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html archives.neohapsis.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562 distro.conectiva.com.br
- http://www.cert.org/advisories/CA-2003-01.html Patch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/n-031.shtml www.ciac.org
- http://www.debian.org/security/2003/dsa-231 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/284857 Patch, Third Party Advisory, US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:007 www.mandriva.com
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.002.html www.openpkg.com
- http://www.redhat.com/support/errata/RHSA-2003-011.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/6627 www.securityfocus.com
- http://www.securitytracker.com/id?1005924 www.securitytracker.com
- http://www.suse.com/de/security/2003_006_dhcp.html www.suse.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11073 exchange.xforce.ibmcloud.com