Unscored severity · published Jan 17, 2003
CVE-2003-0026
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote…
–
CVSS
18.9%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Exploitation
Is it being used?
Exploit prediction (EPSS)18.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DH
Dhcpd · Isc
3.0; 3.0.1; 3.0.1; 3.0.1; 3.0.1; 3.0.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0026
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562
Patch
http://www.cert.org/advisories/CA-2003-01.html
www.ciac.org
http://www.ciac.org/ciac/bulletins/n-031.shtml
Patch
http://www.debian.org/security/2003/dsa-231
Patch
http://www.kb.cert.org/vuls/id/284857
More from Dhcpd
7.5
CVE-2019-6470
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode
–
CVE-2006-3122
The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with…
–
CVE-2004-1006
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than…
–
CVE-2004-0461
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf…
–
CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and…