exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2011-182

Mandriva Linux Security Advisory 2011-182
Posted Dec 9, 2011
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-182 - dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service via a crafted request packet. The updated packages have been patched to correct this issue.

tags | advisory, remote, denial of service
systems | linux, mandriva
advisories | CVE-2011-4539
SHA-256 | 51d4bd08b8453697bf7e58b071c313b90596cecaa635d600e40527886bc8cdf9

Mandriva Linux Security Advisory 2011-182

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2011:182
http://www.mandriva.com/security/
_______________________________________________________________________

Package : dhcp
Date : December 8, 2011
Affected: 2010.1, 2011., Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A vulnerability has been discovered and corrected in dhcp:

dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4
does not properly handle regular expressions in dhcpd.conf, which
allows remote attackers to cause a denial of service (daemon crash)
via a crafted request packet (CVE-2011-4539).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4539
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2010.1:
93339d8bea873040744401eff025cd80 2010.1/i586/dhcp-client-4.1.2-0.6mdv2010.2.i586.rpm
5c76803e864b8e05ea946c12d01052ed 2010.1/i586/dhcp-common-4.1.2-0.6mdv2010.2.i586.rpm
34c2302837e826b12bc93e1d5b971138 2010.1/i586/dhcp-devel-4.1.2-0.6mdv2010.2.i586.rpm
a50bfe8ff674ac46e4fd9582bf2d4ce7 2010.1/i586/dhcp-doc-4.1.2-0.6mdv2010.2.i586.rpm
a26f9e6333a8aef65fa8b356575f80db 2010.1/i586/dhcp-relay-4.1.2-0.6mdv2010.2.i586.rpm
57655b04083fdf38dfea8931ecd4fbad 2010.1/i586/dhcp-server-4.1.2-0.6mdv2010.2.i586.rpm
ee854cf66a14a8da6c41e946d4923ac1 2010.1/SRPMS/dhcp-4.1.2-0.6mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
5ebb02bcd51e4e95d7947ee1369e98b8 2010.1/x86_64/dhcp-client-4.1.2-0.6mdv2010.2.x86_64.rpm
fb27d5e09067334612406f510440384c 2010.1/x86_64/dhcp-common-4.1.2-0.6mdv2010.2.x86_64.rpm
a77da1b13b43b84e2f896304bd6023a5 2010.1/x86_64/dhcp-devel-4.1.2-0.6mdv2010.2.x86_64.rpm
ca9fe0c9d344c71735ce9ec56794a8a8 2010.1/x86_64/dhcp-doc-4.1.2-0.6mdv2010.2.x86_64.rpm
4f9a1145350222601aff057be3ba9d5f 2010.1/x86_64/dhcp-relay-4.1.2-0.6mdv2010.2.x86_64.rpm
9112ea7b8c5e506aa0cec30fa13036e5 2010.1/x86_64/dhcp-server-4.1.2-0.6mdv2010.2.x86_64.rpm
ee854cf66a14a8da6c41e946d4923ac1 2010.1/SRPMS/dhcp-4.1.2-0.6mdv2010.2.src.rpm

Mandriva Linux 2011:
fbd794478978bb9716cc60ebd3a2f352 2011/i586/dhcp-client-4.2.1-0.P1.2.1-mdv2011.0.i586.rpm
86c06bba0892260542a0086bb1cc7701 2011/i586/dhcp-common-4.2.1-0.P1.2.1-mdv2011.0.i586.rpm
44e30f8368922c439dd7c7c0a89a8152 2011/i586/dhcp-devel-4.2.1-0.P1.2.1-mdv2011.0.i586.rpm
5ba4837d95103af80b21779eb0bc96d3 2011/i586/dhcp-doc-4.2.1-0.P1.2.1-mdv2011.0.i586.rpm
6175e2512a26a275a7b5b9a11785498e 2011/i586/dhcp-relay-4.2.1-0.P1.2.1-mdv2011.0.i586.rpm
a1bb783b6be53d03da2316059f663729 2011/i586/dhcp-server-4.2.1-0.P1.2.1-mdv2011.0.i586.rpm
adf3b3f0be37fb5a84e32ce49dada073 2011/SRPMS/dhcp-4.2.1-0.P1.2.1.src.rpm

Mandriva Linux 2011/X86_64:
2d4dbbc15580209d38aab884dc8e78dc 2011/x86_64/dhcp-client-4.2.1-0.P1.2.1-mdv2011.0.x86_64.rpm
ce2894a3b461bb2a27a3458699a7aa7c 2011/x86_64/dhcp-common-4.2.1-0.P1.2.1-mdv2011.0.x86_64.rpm
2fe14cc4323585477a2c074ec0b55d56 2011/x86_64/dhcp-devel-4.2.1-0.P1.2.1-mdv2011.0.x86_64.rpm
7b575160e50230f21a206f14b2f0a4c7 2011/x86_64/dhcp-doc-4.2.1-0.P1.2.1-mdv2011.0.x86_64.rpm
e507a53f1ba4f1f081bcb3fa574708c5 2011/x86_64/dhcp-relay-4.2.1-0.P1.2.1-mdv2011.0.x86_64.rpm
45ea8bf77fcfb1d76fffaabc744e8396 2011/x86_64/dhcp-server-4.2.1-0.P1.2.1-mdv2011.0.x86_64.rpm
adf3b3f0be37fb5a84e32ce49dada073 2011/SRPMS/dhcp-4.2.1-0.P1.2.1.src.rpm

Mandriva Enterprise Server 5:
3f85562e099660f3022bf159e77f5810 mes5/i586/dhcp-client-4.1.2-0.6mdvmes5.2.i586.rpm
a2bb1b81f7501a08926f95d6e818370d mes5/i586/dhcp-common-4.1.2-0.6mdvmes5.2.i586.rpm
396536ac987118e021c0dd8ecc32edfc mes5/i586/dhcp-devel-4.1.2-0.6mdvmes5.2.i586.rpm
dd2f483e186a2fcdd84552151e3d5871 mes5/i586/dhcp-doc-4.1.2-0.6mdvmes5.2.i586.rpm
3ad4ad97e0c6ab638bc91c5c9c7b95a8 mes5/i586/dhcp-relay-4.1.2-0.6mdvmes5.2.i586.rpm
45767067400142c5e63dc4a5879f59eb mes5/i586/dhcp-server-4.1.2-0.6mdvmes5.2.i586.rpm
6d42ed68dbc2c50589e42324a6afa069 mes5/SRPMS/dhcp-4.1.2-0.6mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
cfd6350e8a1da717bd1b3822b58814bc mes5/x86_64/dhcp-client-4.1.2-0.6mdvmes5.2.x86_64.rpm
cb0b0969864f16368d29f60968fdb243 mes5/x86_64/dhcp-common-4.1.2-0.6mdvmes5.2.x86_64.rpm
79cf73d77c0605dc03e8123f22a639e4 mes5/x86_64/dhcp-devel-4.1.2-0.6mdvmes5.2.x86_64.rpm
4957f42c1c22ccc0579b4dfbd704c2d0 mes5/x86_64/dhcp-doc-4.1.2-0.6mdvmes5.2.x86_64.rpm
fe8b837cdd2ba49b1ea45399cb70cc2c mes5/x86_64/dhcp-relay-4.1.2-0.6mdvmes5.2.x86_64.rpm
66a072d0ec897cb53436bd46ba8516ca mes5/x86_64/dhcp-server-4.1.2-0.6mdvmes5.2.x86_64.rpm
6d42ed68dbc2c50589e42324a6afa069 mes5/SRPMS/dhcp-4.1.2-0.6mdvmes5.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFO4NNtmqjQ0CJFipgRAtnmAKCWJCGO4ayJtJ4mLX7BuXO1zv9PQwCg5D1o
eJbSK3/LJ0dKxyarHcT6sW8=
=sNeY
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close