CVE-1999-0808: Buffer Overflow
Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
ISC DHCP (dhcpd)from your environment.Uninstall ISC DHCP (dhcpd) if the service is not required, or replace it with an alternative DHCP implementation until a fixed release is available.
- Configuration
Stop and disable the dhcpd service until a patched/fixed version is available to prevent remote exploitation via long options.
ISC DHCP (dhcpd) service_enabled = false - Compensating control
Restrict access to the DHCP service to trusted networks only. Implement firewall/ACL rules to block or filter DHCP traffic (e.g., UDP ports used by DHCP) from untrusted networks so remote attackers cannot reach dhcpd.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0808?
CVE-1999-0808 is classified as a critical vulnerability due to the potential for remote code execution and denial of service.
How do I fix CVE-1999-0808?
To mitigate CVE-1999-0808, users should upgrade to a version of ISC DHCP Distribution server that is not affected, such as later versions beyond 2.0.
Who is affected by CVE-1999-0808?
CVE-1999-0808 affects users of ISC DHCP Distribution server versions 1.0 and 2.0.
What type of vulnerability is CVE-1999-0808?
CVE-1999-0808 is a buffer overflow vulnerability that can lead to denial of service and remote code execution.
Can CVE-1999-0808 be exploited remotely?
Yes, CVE-1999-0808 can be exploited remotely by an attacker sending specially crafted long options.