DHCP: Option LOG-BUF-OVERFLOW

This anomaly detects that the length of a DHCP Host Name or Client ID option is to long. This can indicate that your system is under attack

Extended Description

ISC DHCPD is prone to a remotely exploitable buffer overflow vulnerability. This issue exists in routines responsible for logging hostname options provided by DHCP clients. Successful exploitation could result in execution of arbitrary code in the context of the DHCPD server. This issue is reported to affect ISC DHCPD versions 3.0.1rc12 and 3.0.1rc13. The vulnerable code exists in previous versions of ISC DHCPD 3, but is only believed to be exploitable in these two releases.

Affected Products

Infoblox dns_one_appliance,Mandriva linux_mandrake

References

BugTraq: 10590

CVE: CVE-2004-0892

URL: http://www.kb.cert.org/vuls/id/317350 http://www.microsoft.com/technet/security/bulletin/MS04-042.mspx

Short Name

DHCP:OPT:LOG-BUF-OVERFLOW

Severity

Minor

Recommended

False

Recommended Action

None

DHCP: Option LOG-BUF-OVERFLOW

Extended Description

Affected Products

References

Found a potential security threat?