May 30th 2004:
Several critical flaws discovered in ISC DHCPD 3.0.1 release candidates 12 and 13
5 stack based overflows and 3 .bss overflows,
all of which allow a malicious DHCP client to DOS the service and, likely, to force the daemon to execute arbitrary code
I would like to thank Solar Designer and David W. Hankins (ISC) for their valuable help.
more details available there
April 19th 2004:
Two denial of service attacks against DLINK's 614+ SOHO appliances
One allows a malicious DHCP client to DOS the DHCP service
the other offers to DOS the system forcing the box to reboot.
more details available there
April 18th 2004:
Two critical flaws detected in DLINK's 614+ and 704 SOHO routers
It is possible to inject a malicious script into the web based administrative interface
allowing a full compromising of these boxes as soon as their administrator enter the configuration interface.
more details available there