CVE-2009-0692
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
- Affected products
- Red Hat, Dhcp, Dhcpclient, Dhcp-Relay, Dhcp-Server, Dhcp3-Client, Dhcp3-Common, Dhcp3-Dev
- Isc Dhcp
- = 2.0, 3.0, 3.1, 4.0, 4.1.0
- CVSS 2.0
- 10.0 HIGH
- EPSS
- 25.8% (98th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2009-07-14
CVE-2009-0692 at NVD
9 known exploits for CVE-2009-0692
Proof-of-concept code and exploit modules indexed by Sploitus
ISC DHCP 'dhclient' 'script_write_params()' - Stack Buffer Overflow Vulnerability
ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC
ISC DHCP 'dhclient' 'script_write_params' - Stack Buffer Overflow Vulnerability
ISC DHCP 'dhclient' 'script_write_params()' Stack Buffer Overflow Vulnerability
ISC DHCP dhclient Buffer Overflow
ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC
ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC
ISC DHCP dhclient 3.1.2p1 - Remote Buffer Overflow (PoC)
ISC DHCP dhclient < 3.1.2p1 - Remote Buffer Overflow (PoC)