CVE-2004-0461

CVE	CVE-2004-0461
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2004-08-06 04:00:00 UTC
Updated	2025-04-03 01:03:51 UTC
Description	The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

Primary CVSS: v2.0 10 from [email protected]

AV:N/AC:L/Au:N/C:C/I:C/A:C

Problem Types: NVD-CWE-Other | n/a

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:N/AC:L/Au:N/C:C/I:C/A:C

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Infoblox	Dns One Appliance	2.3.1_r5	All	All	All
Hardware	Infoblox	Dns One Appliance	2.4.0.8	All	All	All
Hardware	Infoblox	Dns One Appliance	2.4.0.8a	All	All	All
Application	Isc	Dhcpd	3.0.1	rc12	All	All
Application	Isc	Dhcpd	3.0.1	rc13	All	All
Operating System	Mandrakesoft	Mandrake Linux	10.0	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	10.0	All	amd64	All
Operating System	Mandrakesoft	Mandrake Linux	9.0	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	9.1	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	9.1	All	ppc	All
Operating System	Mandrakesoft	Mandrake Linux	9.2	All	All	All
Operating System	Mandrakesoft	Mandrake Linux	9.2	All	amd64	All
Operating System	Redhat	Fedora Core	core_2.0	All	All	All
Application	Suse	Suse Email Server	iii	All	All	All
Operating System	Suse	Suse Linux	7	All	enterprise_server	All
Operating System	Suse	Suse Linux	8	All	enterprise_server	All
Operating System	Suse	Suse Linux	8.0	All	All	All
Operating System	Suse	Suse Linux	8.0	All	i386	All
Operating System	Suse	Suse Linux	8.1	All	All	All
Operating System	Suse	Suse Linux	8.2	All	All	All
Operating System	Suse	Suse Linux	9.0	All	All	All
Operating System	Suse	Suse Linux	9.0	All	x86_64	All
Operating System	Suse	Suse Linux	9.1	All	All	All
Application	Suse	Suse Linux Admin-cd For Firewall	All	All	All	All
Application	Suse	Suse Linux Connectivity Server	All	All	All	All
Application	Suse	Suse Linux Database Server	All	All	All	All
Application	Suse	Suse Linux Firewall Cd	All	All	All	All
Application	Suse	Suse Linux Office Server	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
US-CERT Vulnerability Note VU#654390	af854a3a-2127-422b-91ae-364da2661108	www.kb.cert.org	US Government Resource
www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf	af854a3a-2127-422b-91ae-364da2661108	www.xerox.com
Advisories - Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com
marc.info	af854a3a-2127-422b-91ae-364da2661108	marc.info
'[OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd)' - MARC	af854a3a-2127-422b-91ae-364da2661108	marc.info
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com
marc.info	af854a3a-2127-422b-91ae-364da2661108	marc.info
XEROX WorkCentre Products Multiple Vulnerabilities - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
ISC DHCPD VSPRINTF Buffer Overflow Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Patch, Vendor Advisory
US-CERT Technical Cyber Security Alert TA04-174A -- Multiple Vulnerabilities in ISC DHCP 3	af854a3a-2127-422b-91ae-364da2661108	www.us-cert.gov	Third Party Advisory, US Government Resource
Security Announcement	af854a3a-2127-422b-91ae-364da2661108	www.novell.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.