CVE-2004-1006: ISC Dhcpd

High severity, CVSS 10.0. EPSS: 8% chance of exploitation in the next 30 days.

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.

Affected products

• ISC Dhcpd: version 2.0.pl5 only; version 3.0 only; version 3.0.1 only; version 3.0_b2pl9 only; version 3.0_b2pl23 only; version 3.0_pl1 only; …

Published 2005-03-01. Last modified 2026-06-16.