Detections
Analytics
Debian DSA-1833-1 : dhcp3 - several vulnerabilities
critical Nessus Plugin ID 44698
Language:
Synopsis
The remote Debian host is missing a security-related update.Description
Several remote vulnerabilities have been discovered in ISC's DHCP implementation :- CVE-2009-0692 It was discovered that dhclient does not properly handle overlong subnet mask options, leading to a stack-based buffer overflow and possible arbitrary code execution.
- CVE-2009-1892 Christoph Biedl discovered that the DHCP server may terminate when receiving certain well-formed DHCP requests, provided that the server configuration mixes host definitions using 'dhcp-client-identifier' and 'hardware ethernet'. This vulnerability only affects the lenny versions of dhcp3-server and dhcp3-server-ldap.
Solution
Upgrade the dhcp3 packages.For the old stable distribution (etch), these problems have been fixed in version 3.0.4-13+etch2.
For the stable distribution (lenny), this problem has been fixed in version 3.1.1-6+lenny2.
See Also
https://security-tracker.debian.org/tracker/CVE-2009-0692
Plugin Details
Severity: Critical
ID: 44698
File Name: debian_DSA-1833.nasl
Version: 1.16
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 2/24/2010
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:debian:debian_linux:5.0, cpe:/o:debian:debian_linux:4.0, p-cpe:/a:debian:debian_linux:dhcp3
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/14/2009
Reference Information
CVE: CVE-2009-0692, CVE-2009-1892