Dual DHCP DNS Server DHCP Options Remote Buffer Overflow Vulnerability

Bugtraq ID:	16298
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 07 2006 12:00AM
Updated:	Feb 07 2006 08:53PM
Credit:	Discovered by Luigi Auriemma.
Vulnerable:	Dual DHCP DNS Server Dual DHCP DNS Server 1.0
Not Vulnerable:	Dual DHCP DNS Server Dual DHCP DNS Server 1.1

Dual DHCP DNS Server DHCP Options Remote Buffer Overflow Vulnerability

Dual DHCP DNS Server is prone to a remote buffer overflow vulnerability.

The vulnerability presents itself when the server handles excessive data through the DHCP options field.

Successful exploitation can allow attackers to trigger a denial of service condition or execute arbitrary code to gain unauthorized remote access in the context of the affected server.

Dual DHCP DNS Server 1.0 is reported to be affected.

Dual DHCP DNS Server DHCP Options Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

A proof of concept is available that causes a denial of service:

• /data/vulnerabilities/exploits/dualsbof.zip

Dual DHCP DNS Server DHCP Options Remote Buffer Overflow Vulnerability

Solution:
The vendor has released Dual DHCP DNS Server 1.1 for Windows to address this issue.


Dual DHCP DNS Server Dual DHCP DNS Server 1.0

• Dual DHCP DNS Server Dual DHCP DNS Server Windows Stable 1.1
  Fix for Windows platforms.
  http://sourceforge.net/project/showfiles.php?group_id=132995&package_i d=146064&release_id=383623

Dual DHCP DNS Server DHCP Options Remote Buffer Overflow Vulnerability

References:

• Dual DHCP DNS Server (Luigi Auriemma)
  
• Dual DHCP DNS Server Home Page (Dual DHCP DNS Server)