NetSight
IP …
critical10.0

CVE-2004-0461

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files th…

Impact

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

Affected products

VendorProductAffected versions
InfobloxDns One Appliance
Versions 2.3.1_r5, 2.4.0.8, 2.4.0.8a
IscDhcpd
Version 3.0.1
SuseSuse Email Server
Version iii
SuseSuse Linux Admin-Cd For Firewall
All versions
SuseSuse Linux Connectivity Server
All versions
SuseSuse Linux Database Server
All versions
SuseSuse Linux Firewall Cd
All versions
SuseSuse Linux Office Server
All versions
MandrakesoftMandrake Linux
Versions 9.0, 9.1, 9.2, 10.0
RedhatFedora Core
Version core_2.0
SuseSuse Linux
Versions 7, 8, 8.0, 8.1, 8.2, 9.0

References