ISC DHCP Server Failover Peer Port Field Denial of Service Vulnerability

Bugtraq ID:	45360
Class:	Unknown
CVE:	CVE-2010-3616
Remote:	Yes
Local:	No
Published:	Dec 10 2010 12:00AM
Updated:	Jan 07 2011 02:42PM
Credit:	Brad Bendily
Vulnerable:	MandrakeSoft Linux Mandrake 2010.1 x86_64 MandrakeSoft Linux Mandrake 2010.1 MandrakeSoft Linux Mandrake 2010.0 x86_64 MandrakeSoft Linux Mandrake 2010.0 MandrakeSoft Linux Mandrake 2009.0 x86_64 MandrakeSoft Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 ISC DHCP Server 4.2
Not Vulnerable:	ISC DHCP Server 4.2.0-P2

ISC DHCP Server Failover Peer Port Field Denial of Service Vulnerability

ISC DHCP Server is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected application to become unresponsive, resulting in a denial-of-service condition.

ISC DHCP Server 4.2 is vulnerable; other versions may also be affected.

ISC DHCP Server Failover Peer Port Field Denial of Service Vulnerability

An attacker can carry out this attack using readily available tools.

ISC DHCP Server Failover Peer Port Field Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


MandrakeSoft Linux Mandrake 2009.0 x86_64

• Mandriva dhcp-server-3.0.7-1.7mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-3.0.7-1.7mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-3.0.7-1.7mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-doc-3.0.7-1.7mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-3.0.7-1.7mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-3.0.7-1.7mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.0 x86_64

• Mandriva dhcp-doc-4.1.2-0.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-4.1.2-0.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-4.1.2-0.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-4.1.2-0.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-4.1.2-0.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-4.1.2-0.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva dhcp-devel-3.0.7-1.7mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-3.0.7-1.7mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-doc-3.0.7-1.7mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-3.0.7-1.7mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-3.0.7-1.7mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-3.0.7-1.7mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.1 x86_64

• Mandriva dhcp-relay-4.1.2-0.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-4.1.2-0.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-4.1.2-0.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-doc-4.1.2-0.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-4.1.2-0.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-4.1.2-0.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.1

• Mandriva dhcp-doc-4.1.2-0.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-4.1.2-0.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-4.1.2-0.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-4.1.2-0.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-4.1.2-0.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-4.1.2-0.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.0

• Mandriva dhcp-client-3.0.7-1.7mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-3.0.7-1.7mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-doc-3.0.7-1.7mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-3.0.7-1.7mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-3.0.7-1.7mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-3.0.7-1.7mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.0

• Mandriva dhcp-server-4.1.2-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-4.1.2-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-doc-4.1.2-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-4.1.2-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-4.1.2-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-4.1.2-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva dhcp-common-3.0.7-1.7mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-3.0.7-1.7mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-3.0.7-1.7mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-doc-3.0.7-1.7mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-3.0.7-1.7mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-3.0.7-1.7mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0

• Mandriva dhcp-relay-3.0.7-0.3.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-3.0.7-0.3.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-3.0.7-0.3.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-3.0.7-0.3.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-server-3.0.7-0.3.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva dhcp-server-3.0.7-0.3.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-relay-3.0.7-0.3.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-devel-3.0.7-0.3.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-client-3.0.7-0.3.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva dhcp-common-3.0.7-0.3.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

ISC DHCP Server Failover Peer Port Field Denial of Service Vulnerability

References:

• DHCP: Server Hangs with TCP to Failover Peer Port (ISC)
  
• Product Homepage (ISC)