Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC DHCPD远程格式串溢出漏洞
Vulnerability Description
Internet Software Consortium (ISC)提供了一个动态主机配置服务器程序(DHCPD),此守护进程用于定位网络地址并发送配置参数给主机。 ISC DHCPD存在一个格式串溢出漏洞,允许远程攻击者通过溢出攻击以DHCPD进程的权限(通常是root)在主机上执行任意指令,从而得到主机的控制权。 版本3到版本3.0.1rc8 DHCPD有一个默认打开的NSUPDATE选项,此选项允许DHCP服务器在处理完DHCP请求后把主机相关的信息发送给DNS服务器。DNS服务器收到消息后会回复一
CVSS Information
N/A
Vulnerability Type
N/A