CVE-2003-0039
First published: Fri Feb 07 2003(Updated: )
ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ISC DHCP | =3.0.1-rc9 | |
| ISC DHCP | =3.0.1-rc4 | |
| ISC DHCP | =3.0.1-rc5 | |
| ISC DHCP | =3.0.1-rc1 | |
| ISC DHCP | =3.0.1-rc10 | |
| ISC DHCP | =3.0.1-rc8 | |
| ISC DHCP | =3.0.1-rc3 | |
| ISC DHCP | =3.0.1-rc6 | |
| ISC DHCP | =3.0.1-rc2 | |
| ISC DHCP | =3.0.1-rc7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2003/dsa-245
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000616
- http://www.redhat.com/support/errata/RHSA-2003-034.html
- http://cc.turbolinux.com/security/TLSA-2003-26.txt
- http://www.openpkg.org/security/OpenPKG-SA-2003.012-dhcpd.html
- http://www.kb.cert.org/vuls/id/149953
- http://www.securityfocus.com/bid/6628
- http://marc.info/?l=bugtraq&m=104310927813830&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11187
Frequently Asked Questions
What is the severity of CVE-2003-0039?
CVE-2003-0039 is classified as a denial of service vulnerability that can result in significant service disruption.
How do I fix CVE-2003-0039?
To fix CVE-2003-0039, it is recommended to upgrade to a later version of ISC dhcrelay that does not exhibit this vulnerability.
What are the affected versions in CVE-2003-0039?
The affected versions of ISC dhcrelay include 3.0.1-rc1 through 3.0.1-rc10.
What type of attack does CVE-2003-0039 involve?
CVE-2003-0039 involves an infinite loop caused by BOOTP packets forwarded to a broadcast MAC address, leading to a packet storm.
Who is impacted by CVE-2003-0039?
Any organization using ISC dhcrelay 3.0.1-rc1 to 3.0.1-rc10 is vulnerable to the denial of service conditions described in CVE-2003-0039.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/remedy
- agent/author
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/isc
- canonical/isc dhcp
- version/isc dhcp/3.0.1-rc9
- version/isc dhcp/3.0.1-rc4
- version/isc dhcp/3.0.1-rc5
- version/isc dhcp/3.0.1-rc1
- version/isc dhcp/3.0.1-rc10
- version/isc dhcp/3.0.1-rc8
- version/isc dhcp/3.0.1-rc3
- version/isc dhcp/3.0.1-rc6
- version/isc dhcp/3.0.1-rc2
- version/isc dhcp/3.0.1-rc7