CVE-2002-0702: isc dhcpd

EPSS trend

Probability

31.14%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 31.14% on 19-09-2026

19-09-202619-10-2026

EPSS score

31.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotebsdVerified
ISC DHCPD 2.0/3.0.1 - NSUPDATE Remote Format String
Maturity: weaponized

References

9 links

www.securityfocus.com/bid/4701VDB EntryX Refsource BIDPatchVendor Advisory
www.kb.cert.org/vuls/id/854315Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.novell.com/linux/security/advisories/2002_19_dhcp.htmlVendor AdvisoryX Refsource SUSE
www.cert.org/advisories/CA-2002-12.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
marc.info?l=bugtraq&m=102089498828206&w=2Mailing ListX Refsource BUGTRAQ
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000483Vendor AdvisoryX Refsource CONECTIVA
www.linux-mandrake.com/en/security/2002/MDKSA-2002-037.phpVendor AdvisoryX Refsource MANDRAKEPatch
archives.neohapsis.com/archives/vulnwatch/2002-q2/0063.htmlMailing ListX Refsource VULNWATCH
www.iss.net/security_center/static/9039.phpVDB EntryX Refsource XFPatchVendor Advisory

Related vulnerabilities

CVE-2003-0026debiandhcp3+118.85%23y ago16-01-2003 05:00Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.CVE-2003-0039debiandhcp3+17.95%22y ago01-09-2004 04:00ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.CVE-2004-1006debiandhcp+17.97%21y ago19-11-2004 05:00Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.CVE-2004-0460infobloxdns_one_appliance+545.33%22y ago24-06-2004 04:00Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.CVE-2004-0461infobloxdns_one_appliance+516.77%22y ago24-06-2004 04:00The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.CVE-2019-6470alpinedhcp+518.81%6y ago01-11-2019 22:15There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.

All vulnerabilities indhcpd

CVE-2002-0702: isc dhcpd

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References