ISC DHCPD NSUPDATE Remote Format String Vulnerability Solution:
ISC has provided the following patch:
--- common/print.c Tue Apr 9 13:41:17 2002
+++ common/print.c.patched Tue Apr 9 13:41:56 2002
@@ -1366,8 +1366,8 @@
*s++ = '.';
*s++ = 0;
if (errorp)
- log_error (obuf);
+ log_error ("%s",obuf);
else
- log_info (obuf);
+ log_info ("%s",obuf);
}
#endif /* NSUPDATE */
Updated versions are available.
ISC DHCPD 3.0
ISC DHCPD 3.0.1 rc3
ISC DHCPD 3.0.1 rc4
ISC DHCPD 3.0.1 rc5
ISC DHCPD 3.0.1 rc7
ISC DHCPD 3.0.1 rc2
ISC DHCPD 3.0.1 rc1
ISC DHCPD 3.0.1 rc8
ISC DHCPD 3.0.1 rc6
