Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC DHCPD NSUPDATE MiniRes库远程缓冲区溢出漏洞
Vulnerability Description
DHCPD是动态主机配置协议，提供通过TCP/IP网络对主机传递配置信息。 DHCPD包含的minires库在处理主机名时没有进行正确缓冲区边界检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以root用户权限在系统上执行任意指令。 DHCPD也提供给主机一些网络配置数据，ISC DHCPD允许DHCP服务程序动态更新DNS服务器，支持动态DNS更新是通过NSUPDATE功能实现。 在内部源代码审核中，ISC开发人员发现由NSUPDATE所调用的minires库在解析主机名时存在多个漏洞。这些漏洞
CVSS Information
N/A
Vulnerability Type
N/A