ISC DHCPD NSUPDATE Remote Format String Vulnerability

Bugtraq ID:	4701
Class:	Input Validation Error
CVE:	CVE-2002-0702
Remote:	Yes
Local:	No
Published:	May 08 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovered by Fermín J. Serna <fjserna@ngsec.com>.
Vulnerable:	ISC DHCPD 3.0.1 rc8 ISC DHCPD 3.0.1 rc7 - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.1.1 ISC DHCPD 3.0.1 rc6 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 ISC DHCPD 3.0.1 rc5 ISC DHCPD 3.0.1 rc4 + OpenPKG OpenPKG 1.0 ISC DHCPD 3.0.1 rc3 ISC DHCPD 3.0.1 rc2 ISC DHCPD 3.0.1 rc1 ISC DHCPD 3.0 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1.1 + Caldera OpenLinux Workstation 3.1 + Conectiva Linux 8.0 + MandrakeSoft Linux Mandrake 9.0 + MandrakeSoft Linux Mandrake 8.2 ppc + MandrakeSoft Linux Mandrake 8.2 + MandrakeSoft Linux Mandrake 8.1 ia64 + MandrakeSoft Linux Mandrake 8.1 + MandrakeSoft Multi Network Firewall 2.0 - S.u.S.E. Linux 8.0 - S.u.S.E. Linux 7.3 - S.u.S.E. Linux 7.2 - S.u.S.E. Linux Connectivity Server - S.u.S.E. Linux Database Server 0 - S.u.S.E. Linux Enterprise Server 7 - S.u.S.E. Linux Enterprise Server for S/390 - S.u.S.E. SuSE eMail Server III ISC DHCPD 2.0.pl5 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha

Not Vulnerable:	ISC DHCPD 3.0.1 rc9 + Conectiva Linux Enterprise Edition 1.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + OpenPKG OpenPKG 1.1 + S.u.S.E. Linux 8.1 ISC DHCPD 3.0 pl1 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + RedHat Linux 8.0 i386 + RedHat Linux 8.0 + Slackware Linux 8.1