RHEL 2.1 : pxe (RHSA-2002:165)

Medium Nessus Plugin ID 12317


The remote Red Hat host is missing a security update.


Updated PXE packages are now available for Red Hat Linux Advanced Server which fix a vulnerability that can crash the PXE server using certain DHCP packets.

The PXE package contains the PXE (Preboot eXecution Environment) server and code needed for Linux to boot from a boot disk image on a Linux PXE server.

It was found that the PXE server could be crashed using DHCP packets from some Voice Over IP (VOIP) phones. This bug could be used to cause a denial of service (DoS) attack on remote systems by using malicious packets.

Users of PXE on Red Hat Linux Advanced Server are advised to upgrade to the new release which contains a version of PXE that is not vulnerable to this issue.


Update the affected pxe package.

See Also



Plugin Details

Severity: Medium

ID: 12317

File Name: redhat-RHSA-2002-165.nasl

Version: $Revision: 1.18 $

Type: local

Agent: unix

Published: 2004/07/06

Modified: 2016/12/28

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:pxe, cpe:/o:redhat:enterprise_linux:2.1

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 2002/08/29

Vulnerability Publication Date: 2002/08/30

Reference Information

CVE: CVE-2002-0835

OSVDB: 14440

RHSA: 2002:165