CVE:CVE-2004-0460
CNNVD:CNNVD-200408-115
ISC DHCPD是美国ISC（Internet Systems Consortium）公司的一套动态主机配置协议服务器软件。
ISC DHCPD应用程序存在一个缓冲区溢出问题，远程攻击者可以利用这个漏洞对守护进程进行拒绝服务攻击，或以进程权限在系统上执行任意指令。
ISC DHCPD使用syslog记录每个传输的DHCP包，客户端的DISCOVER和结果OFFER，REQUEST及ACK，任何NAK全部会记录下来。在这些信息中，如果客户端提供了主机名也会被记录到日志行中。如果客户端提供多个主机名选项，这些选项就会串接在一起，如果主机名和选项只包含ASCII字符，那么字符串会传递给非ASCII字符过滤器并临时存在在固定的1024字节缓冲区中。
如果提供过的的主机名选项及和其他文本记录到相同一行中，那么静态缓冲区就会被溢出。不过如果有非ACSII或不可打印字符提供，那么就会被进行其他检查及过滤，导致不能溢出，精心构建提交数据可能以DHCPD进程权限在系统上执行任意指令。
solution:Upgrade infoblox dns_one_appliance to a higher version than 2.3.1_r5,2.4.0.8,2.4.0.8a,and avoid the version 2.3.1_r5,2.4.0.8,2.4.0.8a; Upgrade isc dhcpd to a higher version than 3.0.1:rc12,3.0.1:rc13,and avoid the version 3.0.1:rc12,3.0.1:rc13; Upgrade suse suse_email_server to a higher version than iii,and avoid the version iii; Upgrade suse suse_linux_admin-cd_for_firewall to a higher version than *; Upgrade suse suse_linux_connectivity_server to a higher version than *; Upgrade suse suse_linux_database_server to a higher version than *; Upgrade suse suse_linux_firewall_cd to a higher version than *; Upgrade suse suse_linux_office_server to a higher version than *; Upgrade mandrakesoft mandrake_linux to a higher version than 9.0,9.1,9.2,10.0,and avoid the version 9.0,9.1,9.2,10.0; Upgrade redhat fedora_core to a higher version than core_2.0,and avoid the version core_2.0; Upgrade suse suse_linux to a higher version than 7,8,8.0,8.1,8.2,9.0,9.1,and avoid the version 7,8,8.0,8.1,8.2,9.0,9.1