Security Advisory

CVE-2002-0702

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2002-07-23 04:00:00
Last updated 2024-08-08 02:56:38
Assigner mitre
State PUBLISHED

Description

Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.