Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Date: Fri, 4 Mar 2011 14:31:03 -0600 Reply-To: Troy DawsonSender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: dhcp on SL6.x i386/x86_64 Comments: To: " This email address is being protected from spambots. You need JavaScript enabled to view it. "Synopsis: Moderate: dhcp security update Issue date: 2010-11-30 CVE Names: CVE-2010-3611 A NULL pointer dereference flaw was discovered in the way the dhcpd daemon parsed DHCPv6 packets. A remote attacker could use this flaw to crash dhcpd via a specially-crafted DHCPv6 packet, if dhcpd was running as a DHCPv6 server. (CVE-2010-3611) After installing this update, all DHCP servers will be restarted automatically. SL 6.x SRPMS: dhcp-4.1.1-12.P1.el6_0.1.src.rpm i386: dhclient-4.1.1-12.P1.el6_0.1.i686.rpm dhcp-4.1.1-12.P1.el6_0.1.i686.rpm dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm x86_64: dhclient-4.1.1-12.P1.el6_0.1.x86_64.rpm dhcp-4.1.1-12.P1.el6_0.1.x86_64.rpm dhcp-devel-4.1.1-12.P1.el6_0.1.i686.rpm dhcp-devel-4.1.1-12.P1.el6_0.1.x86_64.rpm -Connie Sieh -Troy Dawson