CVE-2004-0460

CVE	CVE-2004-0460
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2004-08-06 04:00:00 UTC
Updated	2025-04-03 01:03:51 UTC
Description	Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.

Primary CVSS: v2.0 10 from [email protected]

AV:N/AC:L/Au:N/C:C/I:C/A:C

Problem Types: NVD-CWE-Other | n/a

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:N/AC:L/Au:N/C:C/I:C/A:C

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Infoblox	Dns One Appliance	2.3.1_r5	All	All	All
Hardware	Infoblox	Dns One Appliance	2.4.0.8	All	All	All
Hardware	Infoblox	Dns One Appliance	2.4.0.8a	All	All	All
Application	Isc	Dhcpd	3.0.1	rc12	All	All
Application	Isc	Dhcpd	3.0.1	rc13	All	All
Operating System	Mandrakesoft	Mandrake Linux	10.0	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	10.0	All	amd64	All
Operating System	Mandrakesoft	Mandrake Linux	9.0	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	9.1	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	9.1	All	ppc	All
Operating System	Mandrakesoft	Mandrake Linux	9.2	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	9.2	All	amd64	All
Operating System	Redhat	Fedora Core	core_2.0	All	All	All
Application	Suse	Suse Email Server	iii	All	All	All
Operating System	Suse	Suse Linux	7	All	enterprise_server	All
Operating System	Suse	Suse Linux	8	All	enterprise_server	All
Operating System	Suse	Suse Linux	8.0	All	All	All
Operating System	Suse	Suse Linux	8.0	All	i386	All
Operating System	Suse	Suse Linux	8.1	All	All	All
Operating System	Suse	Suse Linux	8.2	All	All	All
Operating System	Suse	Suse Linux	9.0	All	All	All
Operating System	Suse	Suse Linux	9.0	All	x86_64	All
Operating System	Suse	Suse Linux	9.1	All	All	All
Application	Suse	Suse Linux Admin-cd For Firewall	All	All	All	All
Application	Suse	Suse Linux Connectivity Server	All	All	All	All
Application	Suse	Suse Linux Database Server	All	All	All	All
Application	Suse	Suse Linux Firewall Cd	All	All	All	All
Application	Suse	Suse Linux Office Server	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
ISC DHCPD Hostname Options Logging Buffer Overflow Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Patch, Vendor Advisory
www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf	af854a3a-2127-422b-91ae-364da2661108	www.xerox.com
Advisories - Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com
marc.info	af854a3a-2127-422b-91ae-364da2661108	marc.info
'[OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd)' - MARC	af854a3a-2127-422b-91ae-364da2661108	marc.info
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com
marc.info	af854a3a-2127-422b-91ae-364da2661108	marc.info
XEROX WorkCentre Products Multiple Vulnerabilities - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
US-CERT Vulnerability Note VU#317350	af854a3a-2127-422b-91ae-364da2661108	www.kb.cert.org	US Government Resource
US-CERT Technical Cyber Security Alert TA04-174A -- Multiple Vulnerabilities in ISC DHCP 3	af854a3a-2127-422b-91ae-364da2661108	www.us-cert.gov	Third Party Advisory, US Government Resource
Security Announcement	af854a3a-2127-422b-91ae-364da2661108	www.novell.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.