CVE-2009-1892: DoS

Debian Bug report logs - #539492
CVE-2009-1892: DoS

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Steffen Joeris <steffen.joeris@skolelinux.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CVE-2009-1892: DoS

Date: Sat, 01 Aug 2009 22:42:50 +1000

[Message part 1 (text/plain, inline)]

Package: dhcp3-server
Severity: grave
Tags: security patch

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for dhcp3.

CVE-2009-1892[0]:
| dhcpd in ISC DHCP 3.0.4 and 3.1.1, when the dhcp-client-identifier and
| hardware ethernet configuration settings are both used, allows remote
| attackers to cause a denial of service (daemon crash) via unspecified
| requests.

The patch that was used for the DSA is attached.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

Cheers
Steffen

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1892
    http://security-tracker.debian.net/tracker/CVE-2009-1892

[server-clientid-crash.dpatch (text/x-shellscript, attachment)]

Message #12 received at 539492-done@bugs.debian.org (full text, mbox, reply):

From: Andrew Pollock <apollock@debian.org>

To: 539492-done@bugs.debian.org

Subject: Fixed in 3.1.2p1-2

Date: Fri, 9 Oct 2009 00:47:08 +1000

[Message part 1 (text/plain, inline)]

Version: 3.1.2p1-2

This was fixed in 3.1.2p1-2

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.