CVE-2004-0461

high · 10

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

CVSS

16.8%

EPSS (exploit prob.)

97th

EPSS percentile

2004-08-06

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
infoblox	dns_one_appliance	2.3.1_r5
infoblox	dns_one_appliance	2.4.0.8
infoblox	dns_one_appliance	2.4.0.8a
isc	dhcpd	3.0.1
isc	dhcpd	3.0.1
suse	suse_email_server	iii
suse	suse_linux_admin-cd_for_firewall	all versions
suse	suse_linux_connectivity_server	all versions
suse	suse_linux_database_server	all versions
suse	suse_linux_firewall_cd	all versions
suse	suse_linux_office_server	all versions
mandrakesoft	mandrake_linux	9.0
mandrakesoft	mandrake_linux	9.1
mandrakesoft	mandrake_linux	9.1
mandrakesoft	mandrake_linux	9.2
mandrakesoft	mandrake_linux	9.2
mandrakesoft	mandrake_linux	10.0
mandrakesoft	mandrake_linux	10.0
redhat	fedora_core	core_2.0
suse	suse_linux	7
suse	suse_linux	8
suse	suse_linux	8.0
suse	suse_linux	8.0
suse	suse_linux	8.1
suse	suse_linux	8.2
suse	suse_linux	9.0
suse	suse_linux	9.0
suse	suse_linux	9.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0461