CVE-2004-0461
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that...
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
Exploit likelihood
What each source reports
NVD Score used
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
- Record
CVE-2004-0461- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
- Record
CVE-2004-0461- Updated
- 2026-11-02
EUVDEUVD-2004-0460 No score
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
- Record
EUVD-2004-0460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wmcx-jvg5-m384 No score
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that...
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
- Record
GHSA-wmcx-jvg5-m384- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0461 is a high vulnerability (CVSS 10.0) in Isc Dhcpd, published June 24, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.8%, the 97th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/654390
exchange.xforce.ibmcloud.com/vulnerabilities/16476
mandriva.com/security/advisories?name=MDKSA-2004:061
secunia.com/advisories/23265
marc.info?l=bugtraq&m=108795911203342&w=2
Show 7 moreShow less
novell.com/linux/security/advisories/2004_19_dhcp_server.html
securityfocus.com/bid/10591
xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
us-cert.gov/cas/techalerts/TA04-174A.html
nvd.nist.gov/vuln/detail/CVE-2004-0461
github.com/advisories/GHSA-wmcx-jvg5-m384