Integer Overflow Vulnerability in ISC DHCPD and VMware Products

CVE-2007-0062

Summary

An integer overflow vulnerability exists in ISC DHCPD versions prior to 3.0.7 and 3.1.1, as well as various VMware products, allowing remote attackers to conduct denial of service attacks or execute arbitrary code. This vulnerability occurs when a malformed DHCP packet contains a large dhcp-max-message-size parameter, leading to a stack-based buffer overflow in servers configured to relay numerous DHCP options to clients.

References