CVE-2004-1006
highPriorität · verfolgen · 43EPSS 0.080 · 95. PerzentilEUUSEPSS · bewertet 2026-10-27
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRed Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:212 - BehobenRed Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:212 - BehobenRed Hat Linux Advanced Workstation 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/
https://access.redhat.com/errata/RHSA-2005:212
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (11)
Betroffene Produkte und Versionsbereiche.
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::as
- Red Hat Enterprise Linux ES version 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::es
- Red Hat Linux Advanced Workstation 2.1alle Versionenfixedredhat_csafUScpe:/o:redhat:enterprise_linux:2.1::aw
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2005:212Red Hat Security Advisory: dhcp security update2005-04-12csaf · redhat_csafUS
An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (16)
Externe Belege — Patches, Meldungen, Analysen.
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0287.htmlenisa_euvd
- http://archives.neohapsis.com/archives/bugtraq/2004-11/0037.htmlenisa_euvd
- http://marc.info/?l=bugtraq&m=109968710822449&w=2enisa_euvd
- http://www.debian.org/security/2004/dsa-584enisa_euvd
- http://www.kb.cert.org/vuls/id/448384enisa_euvd
- http://www.redhat.com/support/errata/RHSA-2005-212.htmlenisa_euvd
- http://www.securityfocus.com/bid/11591enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17963enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan