7.5

CVE-2003-0026

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Dhcpd Version3.0
Isc ≫ Dhcpd Version3.0.1 Updaterc1
Isc ≫ Dhcpd Version3.0.1 Updaterc2
Isc ≫ Dhcpd Version3.0.1 Updaterc3
Isc ≫ Dhcpd Version3.0.1 Updaterc4
Isc ≫ Dhcpd Version3.0.1 Updaterc5
Isc ≫ Dhcpd Version3.0.1 Updaterc6
Isc ≫ Dhcpd Version3.0.1 Updaterc7
Isc ≫ Dhcpd Version3.0.1 Updaterc8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.42% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.cert.org/advisories/CA-2003-01.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/284857
Patch
Third Party Advisory
US Government Resource