10

CVE-2002-0702

Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Dhcpd Version3.0
Isc ≫ Dhcpd Version3.0.1 Updaterc1
Isc ≫ Dhcpd Version3.0.1 Updaterc2
Isc ≫ Dhcpd Version3.0.1 Updaterc3
Isc ≫ Dhcpd Version3.0.1 Updaterc4
Isc ≫ Dhcpd Version3.0.1 Updaterc5
Isc ≫ Dhcpd Version3.0.1 Updaterc6
Isc ≫ Dhcpd Version3.0.1 Updaterc7
Isc ≫ Dhcpd Version3.0.1 Updaterc8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 37.65% 0.968
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
http://www.cert.org/advisories/CA-2002-12.html
Patch
Third Party Advisory
US Government Resource