CVE-2003-0039

ISC dhcrelay <= 3.0rc9 - Denial of Service via BOOTP Packet Storm

Title source: llm

Description

ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.

References (9)

Core 9

Core References

Vendor Advisory vendor-advisory x_refsource_conectiva

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000616

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/149953

Patch, Vendor Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2003/dsa-245

Various Sources vendor-advisory x_refsource_turbo

http://cc.turbolinux.com/security/TLSA-2003-26.txt

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2003-034.html

Various Sources mailing-list x_refsource_bugtraq

http://www.openpkg.org/security/OpenPKG-SA-2003.012-dhcpd.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/11187

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=104310927813830&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/6628

Scores

EPSS 0.0414

EPSS Percentile 88.8%

Details

Status published

Products (1)

isc/dhcpd 3.0.1 rc1 (10 CPE variants)

Published Feb 07, 2003

Tracked Since Feb 18, 2026