← Back

CVE-2002-0702

nvd nist
Published: Jul 26, 2002Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.

Affected (9)

Products: Isc: Dhcpd
Isc
1 product
Dhcpd
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Dhcpd
Version 3.0.1 rc1
Dhcpd
Version 3.0.1 rc2
Dhcpd
Version 3.0.1 rc3
Dhcpd
Version 3.0.1 rc4
Dhcpd
Version 3.0.1 rc5
Dhcpd
Version 3.0.1 rc6
Dhcpd
Version 3.0.1 rc7
Dhcpd
Version 3.0.1 rc8
Dhcpd
Version 3.0

References (20)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.