CVE-2003-0026
Multiple stack-based buffer overflows in the error handling routines of the minires library, as...
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
- Record
CVE-2003-0026- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
- Record
CVE-2003-0026- Updated
- 2026-11-02
EUVDEUVD-2003-0026 No score
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
- Record
EUVD-2003-0026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jgfq-29vq-wj6m No score
Multiple stack-based buffer overflows in the error handling routines of the minires library, as...
Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
- Record
GHSA-jgfq-29vq-wj6m- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dhcp3Debian:3.0 |
before 3.0+3.0.1rc9-2.1 | 3.0+3.0.1rc9-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0026 is a high vulnerability (CVSS 7.5) in Isc Dhcpd, published January 16, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.9%, the 97th percentile. Fixed in dhcp3 3.0+3.0.1rc9-2.1.
References
redhat.com/support/errata/RHSA-2003-011.html
openpkg.com/security/advisories/OpenPKG-SA-2003.002.html
securitytracker.com/id?1005924
debian.org/security/2003/dsa-231
securityfocus.com/bid/6627
exchange.xforce.ibmcloud.com/vulnerabilities/11073
Show 9 moreShow less
mandriva.com/security/advisories?name=MDKSA-2003:007
kb.cert.org/vuls/id/284857
cert.org/advisories/CA-2003-01.html
ciac.org/ciac/bulletins/n-031.shtml
suse.com/de/security/2003_006_dhcp.html
archives.neohapsis.com/archives/bugtraq/2003-01/0250.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000562
nvd.nist.gov/vuln/detail/CVE-2003-0026
github.com/advisories/GHSA-jgfq-29vq-wj6m