// For flags

CVE-2004-0460

 

Severity Score

10.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.

Desbordamiento de búfer en la capacidad de registro de sucesos (logging) del demonio DHCP (DHCPD) de ISC DHCP 3.0.1rc12 y 3.01rc13 permite a atacantes remotos causar una denegación de servión (caída del servidor) y posiblemente ejecutar código arbitrario mediante multiples opciones de nombre de máquina (hostname) en mensajes (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, o (5) NAK, lo que puede generar una cadena larga cuando se escribe en un fichero de registro.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-05-12 CVE Reserved
  • 2004-06-24 CVE Published
  • 2024-07-09 EPSS Updated
  • 2024-08-08 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Isc
Search vendor "Isc"
Dhcpd
Search vendor "Isc" for product "Dhcpd"
3.0.1
Search vendor "Isc" for product "Dhcpd" and version "3.0.1"
rc12
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Isc
Search vendor "Isc"
Dhcpd
Search vendor "Isc" for product "Dhcpd"
3.0.1
Search vendor "Isc" for product "Dhcpd" and version "3.0.1"
rc13
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Suse
Search vendor "Suse"
Suse Email Server
Search vendor "Suse" for product "Suse Email Server"
iii
Search vendor "Suse" for product "Suse Email Server" and version "iii"
-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Admin-cd For Firewall
Search vendor "Suse" for product "Suse Linux Admin-cd For Firewall"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Connectivity Server
Search vendor "Suse" for product "Suse Linux Connectivity Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Database Server
Search vendor "Suse" for product "Suse Linux Database Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Firewall Cd
Search vendor "Suse" for product "Suse Linux Firewall Cd"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.3.1_r5
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.3.1_r5"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Office Server
Search vendor "Suse" for product "Suse Linux Office Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Isc
Search vendor "Isc"
Dhcpd
Search vendor "Isc" for product "Dhcpd"
3.0.1
Search vendor "Isc" for product "Dhcpd" and version "3.0.1"
rc12
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Isc
Search vendor "Isc"
Dhcpd
Search vendor "Isc" for product "Dhcpd"
3.0.1
Search vendor "Isc" for product "Dhcpd" and version "3.0.1"
rc13
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Suse
Search vendor "Suse"
Suse Email Server
Search vendor "Suse" for product "Suse Email Server"
iii
Search vendor "Suse" for product "Suse Email Server" and version "iii"
-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Admin-cd For Firewall
Search vendor "Suse" for product "Suse Linux Admin-cd For Firewall"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Connectivity Server
Search vendor "Suse" for product "Suse Linux Connectivity Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Database Server
Search vendor "Suse" for product "Suse Linux Database Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Firewall Cd
Search vendor "Suse" for product "Suse Linux Firewall Cd"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Office Server
Search vendor "Suse" for product "Suse Linux Office Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Isc
Search vendor "Isc"
Dhcpd
Search vendor "Isc" for product "Dhcpd"
3.0.1
Search vendor "Isc" for product "Dhcpd" and version "3.0.1"
rc12
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Isc
Search vendor "Isc"
Dhcpd
Search vendor "Isc" for product "Dhcpd"
3.0.1
Search vendor "Isc" for product "Dhcpd" and version "3.0.1"
rc13
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Suse
Search vendor "Suse"
Suse Email Server
Search vendor "Suse" for product "Suse Email Server"
iii
Search vendor "Suse" for product "Suse Email Server" and version "iii"
-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Admin-cd For Firewall
Search vendor "Suse" for product "Suse Linux Admin-cd For Firewall"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Connectivity Server
Search vendor "Suse" for product "Suse Linux Connectivity Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Database Server
Search vendor "Suse" for product "Suse Linux Database Server"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Firewall Cd
Search vendor "Suse" for product "Suse Linux Firewall Cd"
*-
Affected
Infoblox
Search vendor "Infoblox"
Dns One Appliance
Search vendor "Infoblox" for product "Dns One Appliance"
2.4.0.8a
Search vendor "Infoblox" for product "Dns One Appliance" and version "2.4.0.8a"
-
Affected
in Suse
Search vendor "Suse"
Suse Linux Office Server
Search vendor "Suse" for product "Suse Linux Office Server"
*-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.0
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.0"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.1
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.1"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.1
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.1"
ppc
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.2
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.2"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.2
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.2"
amd64
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
10.0
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "10.0"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
10.0
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "10.0"
amd64
Affected
Redhat
Search vendor "Redhat"
Fedora Core
Search vendor "Redhat" for product "Fedora Core"
core_2.0
Search vendor "Redhat" for product "Fedora Core" and version "core_2.0"
-
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
7
Search vendor "Suse" for product "Suse Linux" and version "7"
enterprise_server
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
8
Search vendor "Suse" for product "Suse Linux" and version "8"
enterprise_server
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
8.0
Search vendor "Suse" for product "Suse Linux" and version "8.0"
-
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
8.0
Search vendor "Suse" for product "Suse Linux" and version "8.0"
i386
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
8.1
Search vendor "Suse" for product "Suse Linux" and version "8.1"
-
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
8.2
Search vendor "Suse" for product "Suse Linux" and version "8.2"
-
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
9.0
Search vendor "Suse" for product "Suse Linux" and version "9.0"
-
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
9.0
Search vendor "Suse" for product "Suse Linux" and version "9.0"
x86_64
Affected
Suse
Search vendor "Suse"
Suse Linux
Search vendor "Suse" for product "Suse Linux"
9.1
Search vendor "Suse" for product "Suse Linux" and version "9.1"
-
Affected