Total vulnerabilities in the database
The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux (RHEL) 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command.
| Software | From | Fixed in |
|---|---|---|
| redhat / enterprise_linux | 3.0 | 3.0.x |
| isc / dhcp | 3.0.1-rc12 | 3.0.1-rc12.x |
| isc / dhcp | 3.0.1-rc1 | 3.0.1-rc1.x |
| isc / dhcp | 3.0.1-rc7 | 3.0.1-rc7.x |
| isc / dhcp | 3.0.1-rc2 | 3.0.1-rc2.x |
| isc / dhcp | 3.0.1-rc14 | 3.0.1-rc14.x |
| isc / dhcp | 3.0.1-rc6 | 3.0.1-rc6.x |
| isc / dhcp | 3.0.1-rc13 | 3.0.1-rc13.x |
| isc / dhcp | 3.0.1-rc9 | 3.0.1-rc9.x |
| isc / dhcp | 3.0.1-rc8 | 3.0.1-rc8.x |
| isc / dhcp | 3.0.1-rc10 | 3.0.1-rc10.x |
| isc / dhcp | 3.0.1-rc11 | 3.0.1-rc11.x |
| isc / dhcp | 3.0.1-rc5 | 3.0.1-rc5.x |