Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0692

EPSS 28.13% · P97
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0692

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ISC DHCP dhclient.c script_write_params()函数栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
动态主机配置协议(DHCP)允许IP网络上的各个设备获得各自的网络配置信息，包括IP地址、子网掩码和广播地址 。 ISC DHCP客户端(dhclient)的client/dhclient.c文件中的script_write_params()函数在使用服务器端所提供的租赁地址和子网掩码生成子网数字时没有执行长度检查。如果恶意的DHCP服务器返回了超长的子网掩码选项的话，就可以触发栈溢出，导致客户端崩溃或以root用户权限执行任意指令 。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0692

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0692

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-07-14 · 61 CVEs total

CVE-2009-2461Forkosh mathTeX mathtex.cgi临时文件本地安全漏洞
CVE-2009-2454Citrix Web Interface 未知跨站脚本攻击漏洞
CVE-2009-2451MIM.InfiniX Multiple index.php多个SQL注入漏洞
CVE-2008-6867Scripts For Sites (SFS) EZ Career 'content.php' SQL注入漏洞
CVE-2008-6866php-nuke current_issue_module 脚本modules.php SQL注入漏洞
CVE-2009-2452Citrix Licensing 多个未明漏洞
CVE-2008-6857Xigla Absolute Podcast .NET Cookie用户认证和权限提升漏洞
CVE-2008-6856Xigla Software Absolute FAQ Manager.NET Cookie 用户认证及权限提升漏洞
CVE-2008-6855Xigla Software Absolute FAQ Manager.NET Cookie 权限绕过漏洞
CVE-2008-6854Xigla Software Absolute FAQ Manager.NET Cookie 权限绕过漏洞
CVE-2008-6858Xigla Absolute Banner Manager .NET Cookie权限绕过漏洞
CVE-2009-2460Forkosh mathTeX mathtex.cgi多个缓冲区溢出漏洞
CVE-2009-2459Forkosh mimeTeX多个未明漏洞
CVE-2009-2458Sun Fire V215 Servers 远程服务拒绝漏洞
CVE-2009-2457Novell eDirectory 组件DS\NDSD 多个拒绝服务漏洞
CVE-2009-2456Novell eDirectory 组件DS\NDSD 多个拒绝服务漏洞
CVE-2009-2347Silicon Graphics LibTIFF 数字错误漏洞
CVE-2009-1425HP ProCurve Threat Management Services zl Module 'httpd' 拒绝服务漏洞
CVE-2009-1424HP ProCurve Threat Management Services zl Module DNS 远程服务拒绝漏洞
CVE-2009-1423HP ProCurve Threat Management Services zl Module VPN 远程拒绝服务漏洞

Showing top 20 of 61 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0692

No comments yet

Leave a comment