Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/4701 | vdb-entry x_refsource_BID |
| http://www.kb.cert.org/vuls/id/854315 | third-party-advisory x_refsource_CERT-VN |
| http://www.novell.com/linux/security/advisories/2002_19_dhcp.html | vendor-advisory x_refsource_SUSE |
| http://www.cert.org/advisories/CA-2002-12.html | third-party-advisory x_refsource_CERT |
| http://marc.info/?l=bugtraq&m=102089498828206&w=2 | mailing-list x_refsource_BUGTRAQ |
| http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000483 | vendor-advisory x_refsource_CONECTIVA |
| http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-037.php | vendor-advisory x_refsource_MANDRAKE |
| http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0063.html | mailing-list x_refsource_VULNWATCH |
| http://www.iss.net/security_center/static/9039.php | vdb-entry x_refsource_XF |
| ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt | vendor-advisory x_refsource_CALDERA |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|