Lucene search

[email protected]CVE-2004-0461

HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0461

2004-08-0604:00:00

[email protected]

web.nvd.nist.gov

isc dhcp

cve-2004-0461

dhcpd

buffer overflow

denial of service

vsprintf

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.1%

JSON

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

Affected configurations

NVD

Node

infobloxdns_one_applianceMatch2.3.1_r5

infobloxdns_one_applianceMatch2.4.0.8

infobloxdns_one_applianceMatch2.4.0.8a

AND

iscdhcpdMatch3.0.1rc12

iscdhcpdMatch3.0.1rc13

susesuse_email_serverMatchiii

susesuse_linux_admin-cd_for_firewall

susesuse_linux_connectivity_server

susesuse_linux_database_server

susesuse_linux_firewall_cd

susesuse_linux_office_server

Node

mandrakesoftmandrake_linuxMatch9.0

mandrakesoftmandrake_linuxMatch9.1

mandrakesoftmandrake_linuxMatch9.1ppc

mandrakesoftmandrake_linuxMatch9.2

mandrakesoftmandrake_linuxMatch9.2amd64

mandrakesoftmandrake_linuxMatch10.0

mandrakesoftmandrake_linuxMatch10.0amd64

redhatfedora_coreMatchcore_2.0

susesuse_linuxMatch7enterprise_server

susesuse_linuxMatch8enterprise_server

susesuse_linuxMatch8.0

susesuse_linuxMatch8.0i386

susesuse_linuxMatch8.1

susesuse_linuxMatch8.2

susesuse_linuxMatch9.0

susesuse_linuxMatch9.0x86_64

susesuse_linuxMatch9.1

CPENameOperatorVersion
infoblox:dns_one_applianceinfoblox dns one applianceeq2.3.1_r5
infoblox:dns_one_applianceinfoblox dns one applianceeq2.4.0.8
infoblox:dns_one_applianceinfoblox dns one applianceeq2.4.0.8a
isc:dhcpdisc dhcpdeq3.0.1
suse:suse_email_serversuse suse email servereqiii
suse:suse_linux_admin-cd_for_firewallsuse suse linux admin-cd for firewalleq*
suse:suse_linux_connectivity_serversuse suse linux connectivity servereq*
suse:suse_linux_database_serversuse suse linux database servereq*
suse:suse_linux_firewall_cdsuse suse linux firewall cdeq*
suse:suse_linux_office_serversuse suse linux office servereq*

CPE	Name	Operator	Version
infoblox:dns_one_appliance	infoblox dns one appliance	eq	2.3.1_r5
infoblox:dns_one_appliance	infoblox dns one appliance	eq	2.4.0.8
infoblox:dns_one_appliance	infoblox dns one appliance	eq	2.4.0.8a
isc:dhcpd	isc dhcpd	eq	3.0.1
suse:suse_email_server	suse suse email server	eq	iii
suse:suse_linux_admin-cd_for_firewall	suse suse linux admin-cd for firewall	eq	*
suse:suse_linux_connectivity_server	suse suse linux connectivity server	eq	*
suse:suse_linux_database_server	suse suse linux database server	eq	*
suse:suse_linux_firewall_cd	suse suse linux firewall cd	eq	*
suse:suse_linux_office_server	suse suse linux office server	eq	*