CVE-2004-0461
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
Published:Jun 24, 2004
Last Modified:Apr 16, 2026
EPS:Jun 24, 2004
EPSS Score:0.12127
CVSS Score:10
Affected Products
Vendor
Product
Action
Vendor
Infoblox
Product
Dns One Appliance
Infoblox
Dns One Appliance
Vendor
Isc
Product
Dhcpd
Isc
Dhcpd
Vendor
Mandrakesoft
Product
Mandrake Linux
Mandrakesoft
Mandrake Linux
Vendor
Redhat
Product
Fedora Core
Redhat
Fedora Core
Vendor
Suse
Product
Suse Email Server
Suse
Suse Email Server
Vendor
Suse
Product
Suse Linux
Suse
Suse Linux
Vendor
Suse
Product
Suse Linux Admin-cd For Firewall
Suse
Suse Linux Admin-cd For Firewall
Vendor
Suse
Product
Suse Linux Connectivity Server
Suse
Suse Linux Connectivity Server
Vendor
Suse
Product
Suse Linux Database Server
Suse
Suse Linux Database Server
Vendor
Suse
Product
Suse Linux Firewall Cd
Suse
Suse Linux Firewall Cd
Vendor
Suse
Product
Suse Linux Office Server
Suse
Suse Linux Office Server
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
