CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
Published:Jun 24, 2004
Last Modified:Apr 16, 2026
EPS:Jun 24, 2004
EPSS Score:0.67476
CVSS Score:10
Affected Products
Vendor
Product
Action
Vendor
Infoblox
Product
Dns One Appliance
Infoblox
Dns One Appliance
Vendor
Isc
Product
Dhcpd
Isc
Dhcpd
Vendor
Mandrakesoft
Product
Mandrake Linux
Mandrakesoft
Mandrake Linux
Vendor
Redhat
Product
Fedora Core
Redhat
Fedora Core
Vendor
Suse
Product
Suse Email Server
Suse
Suse Email Server
Vendor
Suse
Product
Suse Linux
Suse
Suse Linux
Vendor
Suse
Product
Suse Linux Admin-cd For Firewall
Suse
Suse Linux Admin-cd For Firewall
Vendor
Suse
Product
Suse Linux Connectivity Server
Suse
Suse Linux Connectivity Server
Vendor
Suse
Product
Suse Linux Database Server
Suse
Suse Linux Database Server
Vendor
Suse
Product
Suse Linux Firewall Cd
Suse
Suse Linux Firewall Cd
Vendor
Suse
Product
Suse Linux Office Server
Suse
Suse Linux Office Server
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
