CVE-2004-0461
Critical
Description
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
SeverityCritical
CVSS10.0
Exploit probability97. percentile16.8%
Product
Isc Dhcpd
PublishedAug 6, 2004
First seenAug 6, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc dhcpd | 3.0.1 | — |
| infoblox dns_one_appliance | 2.3.1_r5, 2.4.0.8, 2.4.0.8a | — |
| suse suse_email_server | iii | — |
| suse suse_linux_admin-cd_for_firewall | No range specified | — |
| suse suse_linux_connectivity_server | No range specified | — |
| suse suse_linux_database_server | No range specified | — |
| suse suse_linux_firewall_cd | No range specified | — |
| suse suse_linux_office_server | No range specified | — |
| mandrakesoft mandrake_linux | 9.0, 9.1, 9.2, 10.0 | — |
| redhat fedora_core | core_2.0 | — |
| suse suse_linux | 7, 8, 8.0, 8.1, 8.2, 9.0, 9.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.