NVD Vulnerability Detail
Search Exploit, PoC
CVE-2004-1006
Summary

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.

Publication Date March 1, 2005, 2 p.m.
Registration Date Jan. 29, 2021, 6 p.m.
Last Update July 11, 2017, 10:30 a.m.
CVSS2.0 : HIGH
Score 10.0
Vector AV:N/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) 高
完全性への影響(I) 高
可用性への影響(A) 高
Get all privileges. はい
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:isc:dhcpd:2.0.pl5:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0:rc12:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0:rc4:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc1:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc10:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc11:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc12:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc13:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc14:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc2:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc3:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc4:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc5:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc6:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc7:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc8:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0.1:rc9:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0_b2pl9:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0_b2pl23:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0_pl1:*:*:*:*:*:*:*
cpe:2.3:a:isc:dhcpd:3.0_pl2:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List