CVE-2004-0460

CVE-2004-0460 describes a critical buffer overflow vulnerability in the logging capability of ISC DHCP daemon (DHCPD) versions 3.0.1rc12 and 3.0.1rc13, affecting products from vendors like Infoblox, ISC, Mandrakesoft, Red Hat, and SUSE. This flaw allows unauthenticated remote attackers to trigger a denial of service (server crash) and potentially execute arbitrary code by sending crafted DHCP messages containing multiple hostname options that generate an excessively long log entry. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.