Unscored CVE-2020-26131 EUVD-2020-18761GHSA-mrff-j2hx-cpjj

Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta. Due to insufficient access restriction…

Published Oct 28, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenDHCPServer.exe (Regular) or the OpenDHCPLdap.exe (LDAP Based) binary.

References

https://sourceforge.net/projects/dhcpserver/
https://github.com/an0ry/advisories
https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26131.md