-----BEGIN PGP SIGNED MESSAGE-----

===============================================================================
Security Advisory                                                       CERT-NL
===============================================================================
Author/Source : Nico de Koo                                 Index  :    S-98-29
Distribution  : World                                       Page   :          1
Classification: External                                    Version:          1
Subject       : ISC: DHCP Distribution Vulnerability         Date   :  22-May-97
===============================================================================

By courtesy of ISC and CIAC we received information on a vulnerability in 
ISC: DHCP Distribution. 

CERT-NL recommends upgrading as mentioned in this advisory

==============================================================================

There are two bugs in all previous releases of the Internet Software
Consortium DHCP Distribution which can be exploited to crash the DHCP
server, or possibly worse.  I have prepared new distributions of
version 1.0 and 2.0 of the DHCP Distribution which correct these
problems.

Patches and for and new distributions of version 1.0 and version 2.0
are available at:

        ftp://ftp.isc.org/isc/dhcp/dhcp-1.0.0-1.0pl1.diff.gz
        ftp://ftp.isc.org/isc/dhcp/dhcp-2.0b1pl0-2.0b1pl1.diff.gz
        ftp://ftp.isc.org/isc/dhcp/dhcp-1.0pl1.tar.gz
        ftp://ftp.isc.org/isc/dhcp/dhcp-2.0b1pl1.tar.gz


==============================================================================
CERT-NL is the Computer Emergency Response Team for SURFnet customers. 
SURFnet is the Dutch network for educational, research and related institutes.
CERT-NL is a member of the Forum of Incident Response and Security Teams 
(FIRST). 

All CERT-NL material is available under:
  http://www.surfnet.nl/surfnet/security/cert-nl.html
  ftp://ftp.surfnet.nl/surfnet/net-security 
  
In case of computer or network security problems please contact your 
local CERT/security-team or CERT-NL  (if your institute is NOT a SURFnet 
customer please address the appropriate (local) CERT/security-team).

CERT-NL is one/two hour(s) ahead of UTC (GMT) in winter/summer,
i.e. UTC+0100 in winter and UTC+0200 in summer (DST).

   Email:     cert-nl@surfnet.nl     ATTENDED REGULARLY ALL DAYS
   Phone:     +31 302 305 305        BUSINESS HOURS ONLY
   Fax:       +31 302 305 329        BUSINESS HOURS ONLY
   Snailmail: SURFnet bv
              Attn. CERT-NL
              P.O. Box 19035
              NL - 3501 DA  UTRECHT
              The Netherlands

NOODGEVALLEN:    06 52 87 92 82      ALTIJD BEREIKBAAR 
EMERGENCIES : +31 6 52 87 92 82      ATTENDED AT ALL TIMES
CERT-NL'S EMERGENCY PHONENUMBER	IS ONLY TO BE USED IN CASE OF EMERGENCIES:
THE SURFNET HELPDESK OPERATING THE EMERGENCY NUMBER HAS A *FIXED* 
PROCEDURE FOR DEALING WITH YOUR ALERT AND WILL IN REGULAR CASES RELAY IT
TO CERT-NL IN AN APPROPRIATE MANNER. CERT-NL WILL THEN CONTACT YOU.

==============================================================================


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: cp850

iQCVAwUBNWU7aVpSTqmIRWKVAQGRcQP9ErNQZgxCwuF4JjfcHV73dngIcAzn7qRX
NoHolqyo/MSeTzwakhztdaJi1qnzp5gdAw5y6xVI3JRBa9FOOTbDlbNRgGfojhfE
onya9S2sVN92Kpdo8SfiRktsxyv5nP4yOmRfsisLcZz7oCHfd95oqt+yq0MFpduW
O6c6wfCL54I=
=+lhC
-----END PGP SIGNATURE-----