CVE-2003-0026

Published: Jan 17, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.

Affected (9)

Products: Isc: Dhcpd

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Isc Dhcpd	Version 3.0.1 rc1
Isc Dhcpd	Version 3.0.1 rc2
Isc Dhcpd	Version 3.0.1 rc3
Isc Dhcpd	Version 3.0.1 rc4
Isc Dhcpd	Version 3.0.1 rc5
Isc Dhcpd	Version 3.0.1 rc6
Isc Dhcpd	Version 3.0.1 rc7
Isc Dhcpd	Version 3.0.1 rc8
Isc Dhcpd	Version 3.0

References (26)

http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2003-01.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.ciac.org/ciac/bulletins/n-031.shtml

Source: cve@mitre.org

http://www.debian.org/security/2003/dsa-231

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/284857

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2003:007

Source: cve@mitre.org

http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.002.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-011.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/6627

Source: cve@mitre.org

http://www.securitytracker.com/id?1005924

Source: cve@mitre.org

http://www.suse.com/de/security/2003_006_dhcp.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11073

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2003-01/0250.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000562

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cert.org/advisories/CA-2003-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

http://www.ciac.org/ciac/bulletins/n-031.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2003/dsa-231

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/284857

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2003:007

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-011.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/6627

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1005924

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.suse.com/de/security/2003_006_dhcp.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11073

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.