Re: CERT Advisory CA-2003-01 Buffer Overflows in ISC DHCPD Minires Library

   *** From dhcp-server -- To unsubscribe, see the end of this message. ***




Josh Hicks <jhicks@xxxxxxx> writes:

>    *** From dhcp-server -- To unsubscribe, see the end of this message. ***
> 
> 
> 
> Quick question:
> 
>   If I were to disable the 'NSUPDATE' feature of dhcpd, would I still be
> vulnerable to the above CERT Advisory? 

a related question - if you ignore the client supplied hostname
(i think the config params are "use-host-decl-names on" & "ignore
client-updates") but still do ddns, are you still at risk? i've read the
release and it seems to imply that if you pass the client supplied hostname
to the dynamic dns subsystem, you are vulnerable.

thanks,

jeff

-----------------------------------------------------------------------
List Archives : http://www.isc.org/ml-archives/dhcp-server/
Unsubscribe   : http://www.isc.org/dhcp-lists.html    
-or-          : mailto:dhcp-server-request@xxxxxxx?Subject=unsubscribe  
-----------------------------------------------------------------------