← Back

CVE-2004-1006

nvd nist
Published: Mar 1, 2005Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.

Affected (22)

Products: Isc: Dhcpd
1 product
Dhcpd
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Version 2.0.pl5
Version 3.0.1 rc10
Version 3.0.1 rc11
Version 3.0.1 rc12
Version 3.0.1 rc13
Version 3.0.1 rc14
Version 3.0.1 rc1
Version 3.0.1 rc2
Version 3.0.1 rc3
Version 3.0.1 rc4
Version 3.0.1 rc5
Version 3.0.1 rc6
Version 3.0.1 rc7
Version 3.0.1 rc8
Version 3.0.1 rc9
Version 3.0
Version 3.0 rc12
Version 3.0 rc4
Version 3.0_b2pl23
Version 3.0_b2pl9
Version 3.0_pl1
Version 3.0_pl2

References (16)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.