CVE-2003-0026: Buffer Overflow
Published Jan 16, 2003
·Updated
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Affected Software
9 affected components
ISC dhcpd=3.0
ISC dhcpd=3.0.1-rc1
ISC dhcpd=3.0.1-rc2
ISC dhcpd=3.0.1-rc3
ISC dhcpd=3.0.1-rc4
ISC dhcpd=3.0.1-rc5
ISC dhcpd=3.0.1-rc6
ISC dhcpd=3.0.1-rc7
ISC dhcpd=3.0.1-rc8
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jan 16, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Jan 17, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0026?
CVE-2003-0026 is classified as a critical vulnerability due to the potential for remote code execution.
2
What kind of attack is associated with CVE-2003-0026?
CVE-2003-0026 allows remote attackers to exploit stack-based buffer overflows via malicious DHCP messages.
3
How can I fix CVE-2003-0026?
To fix CVE-2003-0026, it is essential to upgrade to a patched version of ISC DHCPD that addresses this vulnerability.
4
Which versions of ISC DHCPD are affected by CVE-2003-0026?
CVE-2003-0026 affects ISC DHCPD versions 3.0 through 3.0.1RC10.
5
What is the impact of exploiting CVE-2003-0026?
Exploiting CVE-2003-0026 could allow attackers to execute arbitrary code on the affected system.