CVE-2002-0702: Critical severity ISC dhcpd vulnerability
Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0702?
CVE-2002-0702 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2002-0702?
To fix CVE-2002-0702, upgrade to a non-vulnerable version of ISC DHCP Daemon that has addressed the format string vulnerabilities.
What software is affected by CVE-2002-0702?
CVE-2002-0702 affects ISC DHCP daemon versions 3 to 3.0.1rc8 with the NSUPDATE option enabled.
What type of attacks can CVE-2002-0702 enable?
CVE-2002-0702 allows remote attackers to execute arbitrary code on the affected system through manipulated DNS server responses.
Is CVE-2002-0702 still a risk for modern systems?
While CVE-2002-0702 primarily impacts older versions of ISC DHCP, systems running these versions remain at risk if not updated.