Debian Security Advisory
dhcp client -- remote root exploit in dhcp client
- Date Reported:
- 28 Jun 2000
- Affected Packages:
- dhcp-client-beta, dhcp-client
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2000-0585.
- More information:
- The versions of the ISC DHCP client in Debian 2.1 (slink)
and Debian 2.2 (potato) are vulnerable to a root exploit. The OpenBSD team
reports that the client inappropriately executes commands embedded in replies
sent from a DHCP server. This means that a malicious DHCP server can execute
commands on the client with root privileges.
Note: this report has been superseded. Please consult the Jul 28, 2000 report for further details.