Signature Detail
Short Name |
DHCP:OPT:LOG-BUF-OVERFLOW |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
DHCP |
Keywords |
LOG BUFFER OVERFLOW |
Release Date |
2005/11/07 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DHCP: Option LOG-BUF-OVERFLOW
This anomaly detects that the length of a DHCP Host Name or Client ID option is to long. This can indicate that your system is under attack
Extended Description
ISC DHCPD is prone to a remotely exploitable buffer overflow vulnerability. This issue exists in routines responsible for logging hostname options provided by DHCP clients. Successful exploitation could result in execution of arbitrary code in the context of the DHCPD server. This issue is reported to affect ISC DHCPD versions 3.0.1rc12 and 3.0.1rc13. The vulnerable code exists in previous versions of ISC DHCPD 3, but is only believed to be exploitable in these two releases.
Affected Products
- Infoblox DNS One Appliance 2.3.1 -R5
- Infoblox DNS One Appliance 2.4.0 .0-8
- Infoblox DNS One Appliance 2.4.0 .0-8A
- ISC DHCPD 3.0.1 Rc12
- ISC DHCPD 3.0.1 Rc13
- Mandriva Linux Mandrake 10.0.0
- Mandriva Linux Mandrake 10.0.0 amd64
- Mandriva Linux Mandrake 9.0.0
- Mandriva Linux Mandrake 9.1.0
- Mandriva Linux Mandrake 9.1.0 Ppc
- Mandriva Linux Mandrake 9.2.0
- Mandriva Linux Mandrake 9.2.0 amd64
- Red Hat Fedora Core2
- SuSE Linux 8.0.0
- SuSE Linux 8.0.0 i386
- SuSE Linux 8.1.0
- SuSE Linux 9
- SuSE Linux 9.1
- SuSE Linux Admin-CD for Firewall
- SuSE Linux Connectivity Server
- SuSE Linux Database Server
- SuSE Linux Firewall on CD
- SuSE Linux Office Server
- SuSE Linux Personal 8.2.0
- SuSE Linux Personal 9.0.0
- SuSE Linux Personal 9.0.0 X86 64
- SuSE Linux Personal 9.1.0
- SuSE SuSE eMail Server III
- SuSE SUSE Linux Enterprise Server 7
- SuSE SUSE Linux Enterprise Server 8
References