CVE-2002-0702: ISC Dhcpd

High severity, CVSS 10.0. EPSS: 31.1% chance of exploitation in the next 30 days.

Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.

Affected products

• ISC Dhcpd: version 3.0 only; version 3.0.1 only

Published 2002-07-26. Last modified 2026-06-16.