exploits , vulnerabilities , articles , ISC DHCP Server Host Definition Remote Denial Of Service Vulnerability

Title	ISC DHCP Server Host Definition Remote Denial Of Service Vulnerability
Published	2009-07-14-12:00AM
Updated	2009-07-14-09:26PM
Class	Configuration Error
CVE	CVE-2009-1892
Remote	Yes
Local	No
Credit	Christoph Biedl
Vulnerable	ISC DHCPD 3.0.1 rc9 Conectiva Linux Enterprise Edition 1.0 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 OpenPKG OpenPKG 1.1 S.u.S.E. Linux 8.1 ISC DHCPD 3.0.1 rc8 ISC DHCPD 3.0.1 rc7 FreeBSD FreeBSD 4.5 FreeBSD FreeBSD 4.4 FreeBSD FreeBSD 4.3 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.1.1 ISC DHCPD 3.0.1 rc6 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 ISC DHCPD 3.0.1 rc5 ISC DHCPD 3.0.1 rc4 OpenPKG OpenPKG 1.0 ISC DHCPD 3.0.1 rc3 ISC DHCPD 3.0.1 rc2 ISC DHCPD 3.0.1 rc14 ISC DHCPD 3.0.1 rc13 ISC DHCPD 3.0.1 rc12 ISC DHCPD 3.0.1 rc11 OpenPKG OpenPKG 1.2 OpenPKG OpenPKG Current ISC DHCPD 3.0.1 rc10 OpenPKG OpenPKG Current ISC DHCPD 3.0.1 rc1 ISC DHCPD 3.0 rc4 S.u.S.E. Linux 7.2 i386 S.u.S.E. Linux 7.2 ISC DHCPD 3.0 rc12 S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ISC DHCPD 3.0 pl2 ISC DHCPD 3.0 pl1 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 RedHat Linux 8.0 i386 RedHat Linux 8.0 Slackware Linux 8.1 ISC DHCPD 3.0 b2pl9 MandrakeSoft Linux Mandrake 7.2 ISC DHCPD 3.0 b2pl23 MandrakeSoft Single Network Firewall 7.2 ISC DHCPD 3.0 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 Conectiva Linux 8.0 MandrakeSoft Linux Mandrake 9.0 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Multi Network Firewall 2.0 S.u.S.E. Linux 8.0 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.2 S.u.S.E. Linux Connectivity Server S.u.S.E. Linux Database Server 0 S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. SuSE eMail Server III ISC DHCPD 3.0.2rc1 ISC DHCPD 2.0.pl5 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia64 Debian Linux 3.0 ia32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha ISC DHCPD 2.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia64 Debian Linux 5.0 ia32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia64 Debian Linux 4.0 ia32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Admanager Admanager 3.0 pl2
Not Vulnerable	ISC DHCPD 3.1.1 ISC DHCPD 3.0.4
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability