Unscored severity · published Aug 6, 2004
CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and…
–
CVSS
45.3%
EPSS
No
On KEV
Description
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
Exploitation
Is it being used?
Exploit prediction (EPSS)45.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DH
Dhcpd · Isc
3.0.1; 3.0.1 · source: NVD
DO
Dns One Appliance · Infoblox
2.3.1_r5; 2.4.0.8; 2.4.0.8a · source: NVD
FC
Fedora Core · Redhat
core_2.0 · source: NVD
ML
Mandrake Linux · Mandrakesoft
9.0; 9.1; 9.1; 9.2; 9.2; 10.0; +1 more · source: NVD
SE
Suse Email Server · Suse
iii · source: NVD
SL
Suse Linux · Suse
7; 8; 8.0; 8.0; 8.1; 8.2; +3 more · source: NVD
SL
Suse Linux Admin-cd For Firewall · Suse
All versions, or not specified · source: NVD
SL
Suse Linux Connectivity Server · Suse
All versions, or not specified · source: NVD
SL
Suse Linux Database Server · Suse
All versions, or not specified · source: NVD
SL
Suse Linux Firewall CD · Suse
All versions, or not specified · source: NVD
SL
Suse Linux Office Server · Suse
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0460
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0460
marc.info
http://marc.info/?l=bugtraq&m=108795911203342&w=2
marc.info
http://marc.info/?l=bugtraq&m=108843959502356&w=2
marc.info
http://marc.info/?l=bugtraq&m=108938625206063&w=2
secunia.com
http://secunia.com/advisories/23265
US Government Resource
http://www.kb.cert.org/vuls/id/317350
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2004:061
More from Dns One Appliance
–
CVE-2004-0606
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1)…
–
CVE-2004-0461
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf…