Nahuel Riva and Gerardo Richarte discovered that the DHCP server did not correctly handle certain client options. A remote attacker could send malicious DHCP replies to the server and execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

SunOS 5.10：usr/lib/inet/in.dhcpd パッチ。
Sun によるこのパッチの最終更新日：Nov/06/08

SunOS 5.10_x86：usr/lib/inet/in.dhcpd patc。
Sun によるこのパッチの最終更新日：Nov/06/08

SunOS 5.8: dhcp server and admin patch.
Date this patch was last updated by Sun : Nov/06/08

SunOS 5.10：usr/lib/inet/in.dhcpd 修補程式。上次由 Sun 更新此修補程式的日期：2008 年 11 月 6 日

SunOS 5.10：usr/lib/inet/in.dhcpd 修补程序。Sun 上次更新此修补程序的日期：2008 年 11 月 6 日

SunOS 5.10_x86：usr/lib/inet/in.dhcpd 修補程式。上次由 Sun 更新此修補程式的日期：2008 年 11 月 6 日

SunOS 5.10_x86：usr/lib/inet/in.dhcpd 修补程序。Sun 上次更新此修补程序的日期：2008 年 11 月 6 日

SunOS 5.10_x86: usr/lib/inet/in.dhcpd patc.
Date this patch was last updated by Sun : Nov/06/08

The patch used to correct the DHCP server buffer overflow in DSA-1388-1 was incomplete and did not adequately resolve the problem.
This update to the previous advisory makes updated packages based on a newer version of the patch available.

For completeness, please find below the original advisory :

It was discovered that dhcp, a DHCP server for automatic IP address assignment, didn't correctly allocate space for network replies. This could potentially allow a malicious DHCP client to execute arbitrary code upon the DHCP server.

An updated dhcp package that corrects a security flaw is now available for Red Hat Enterprise Linux 2.1.

This update has been rated as having important security impact by the Red Hat Security Response Team.

The dhcp package provides the ISC Dynamic Host Configuration Protocol (DHCP) server and relay agent, dhcpd. DHCP is a protocol that allows devices to get their own network configuration information from a server.

A bug was found in the way dhcpd validates certain DHCP protocol options. A malicious DHCP client could send a carefully crafted DHCP request and cause dhcpd to crash or possibly execute arbitrary code.
(CVE-2007-5365)

All users of dhcp should upgrade to this updated package, which contains a backported patch that resolves this issue.

USN-531-1 fixed vulnerabilities in dhcp. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes the problem.

Nahuel Riva and Gerardo Richarte discovered that the DHCP server did not correctly handle certain client options. A remote attacker could send malicious DHCP replies to the server and execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

SunOS 5.10: usr/lib/inet/in.dhcpd patch.
Date this patch was last updated by Sun : Nov/06/08

ID	名稱	產品	系列	已發布	已更新	嚴重性
28136	Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : dhcp vulnerability (USN-531-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	critical
107508	Solaris 10 (sparc) : 138876-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
108006	Solaris 10 (x86 ) ： 138877-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
13310	Solaris 8 (sparc) : 109077-21	Nessus	Solaris Local Security Checks	2004/7/12	2021/1/14	critical
107508	Solaris 10 (sparc)：138876-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
107508	Solaris 10 (sparc)：138876-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
108006	Solaris 10 (x86)：138877-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
108006	Solaris 10 (x86)：138877-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
108006	Solaris 10 (x86) : 138877-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high
27515	Debian DSA-1388-3 : dhcp - buffer overflow	Nessus	Debian Local Security Checks	2007/10/19	2021/1/4	critical
27566	RHEL 2.1 : dhcp (RHSA-2007:0970)	Nessus	Red Hat Local Security Checks	2007/10/25	2021/1/14	critical
28137	Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : dhcp vulnerability (USN-531-2)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	critical
107508	Solaris 10 (sparc) : 138876-01	Nessus	Solaris Local Security Checks	2018/3/12	2021/1/14	high

偵測

搜尋 Plugin

critical

high

high

critical

high

high

high

high

high

critical

critical

critical

high