Red Hat Security AdvisoryRHSA-2009:1154
dhcp security update
Released 2009-07-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 dhclient-7:3.0.1-10.2_EL3, dhclient-7:3.0.1-10.2_EL3.i386, dhcp-7:3.0.1-10.2_EL3 +3
- Red Hat Enterprise Linux AS version 3 dhclient-7:3.0.1-10.2_EL3, dhclient-7:3.0.1-10.2_EL3.i386, dhclient-7:3.0.1-10.2_EL3.ia64 +9
- Red Hat Enterprise Linux ES version 3 dhclient-7:3.0.1-10.2_EL3, dhclient-7:3.0.1-10.2_EL3.i386, dhclient-7:3.0.1-10.2_EL3.ia64 +6
- Red Hat Enterprise Linux WS version 3 dhclient-7:3.0.1-10.2_EL3, dhclient-7:3.0.1-10.2_EL3.i386, dhclient-7:3.0.1-10.2_EL3.ia64 +6
Fixes 2 records
Priority MEDIUM 64
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.2578 · Published 2009-07-14 · Fixed CWE-119
Priority LOW 31
The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00602 · Published 2009-07-17 · Fixed CWE-59
