|
|
Family: Slackware Local Security Checks --> Category: infos
SSA-2005-255-01 dhcpcd DoS Vulnerability Scan
Vulnerability Scan Summary
SSA-2005-255-01 dhcpcd DoS
Detailed Explanation for this Vulnerability Test
New dhcpcd packages are available for Slackware 8.1, 9.0, 9.1, 10.0,
10.1, and -current to fix a minor security issue. The dhcpcd daemon
can be tricked into reading past the end of the DHCP buffer by a
malicious DHCP server, which causes the dhcpcd daemon to crash and
results in a denial of service. Of course, a malicious DHCP server
could simply give you an IP address that wouldn't work, too, such as
127.0.0.1, but since people have been asking about this issue, here's
a fix, and that's the extent of the impact. In other words, very
little real impact.
Even less detail about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1848
Click HERE for more information and discussions on this network vulnerability scan.
|
