Mandrake Security Advisory MDVSA-2009:151 (dhcp)

  1. Network Vulnerabilities
  2. Mandrake Local Security Checks
  3. Mandrake Security Advisory MDVSA-2009:151 (dhcp)
Summary
The remote host is missing an update to dhcp announced via advisory MDVSA-2009:151.
Solution
To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:151
Insight
A vulnerability has been found and corrected in ISC DHCP: Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option (CVE-2009-0692). This update provides fixes for this vulnerability. Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0
Severity
High Severity
Classification
Related Vulnerabilities