← Database

CVE-2004-0461

CRITICAL CVSS: 10.0 Published: 2004-08-06 Modified: 2026-06-16

Description

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

Affected Platforms

Mandrakesoft Mandrake LinuxSuse Suse Linux Firewall CdSuse Suse Email ServerSuse Suse Linux Office ServerSuse Suse LinuxIsc DhcpdRedhat Fedora CoreSuse Suse Linux Connectivity ServerSuse Suse Linux Database ServerSuse Suse Linux Admin-Cd For Firewall

Weakness Type

NVD-CWE-Other

References