Nessus Plugin #15682

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA584] DSA-584-1 dhcp

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-584-1 dhcp

Version:

$Revision: 1.1 $

Cve_id:

CAN-2004-1006

Bugtraq_id:

-

Xrefs:

DSA:584

Description:

"infamous41md" noticed that the log functions in dhcp 2.x, which is
still distributed in the stable Debian release, contained pass
parameters to function that use format strings. One use seems to be
exploitable in connection with a malicious DNS server.
For the stable distribution (woody) these problems have been fixed in
version 2.0pl5-11woody1.
For the unstable distribution (sid) these problems have been fixed in
version 2.0pl5-19.1.
We recommend that you upgrade your dhcp package.


Solution : http://www.debian.org/security/2004/dsa-584
Risk factor : High